Ransom

What is “Dropped:Generic.Ransom.HydraCrypt.97E650EF”?

Malware Removal

The Dropped:Generic.Ransom.HydraCrypt.97E650EF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Dropped:Generic.Ransom.HydraCrypt.97E650EF virus can do?

  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

How to determine Dropped:Generic.Ransom.HydraCrypt.97E650EF?


File Info:

crc32: DA1FDFC4
md5: ec3d51f329a313157b74019b9193bc36
name: EC3D51F329A313157B74019B9193BC36.mlw
sha1: 8cf9cc2aad6ac759e1e5765cd7df8654363b4577
sha256: 0e518989d20d0f6925a98f556696015200566c2789d8cf6ddf792f00121041cc
sha512: 788511af3e2282cb40cf861d0aca8bddd06133c7817a494d3b70b52d5eff7d4aad1f4edf88006a21176960511aa5d31d596c81aca26fec02b688fe09a7b3894e
ssdeep: 1536:PMpxVUC9B3yGoERbEy/Qlc7uh1prC8gKOFtA:PuxVUg3yGDRb8lc7uh1pOEqu
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

LegalCopyright: zxDtGhhLpIZa8CX
FileVersion: 8.0.3.3
CompanyName: PCDoctor
LegalTrademarks: Dlv3
Comments: bhcTP6S5OJ2-VZC
ProductName: Loader
ProductVersion: 2.9.6.2
FileDescription: 2Ewj2z56-O3vHI3
OriginalFilename: newgame.exe
Translation: 0x0409 0x04b0

Dropped:Generic.Ransom.HydraCrypt.97E650EF also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0057a3061 )
Elasticmalicious (high confidence)
DrWebTrojan.ClipBankerNET.7
CynetMalicious (score: 99)
ALYacTrojan.Ransom.HydraCrypt
CylanceUnsafe
SangforTrojan.Win32.Save.a
AlibabaRansom:Win32/FileCryptor.d9ec09d3
K7GWTrojan ( 0057a3061 )
Cybereasonmalicious.329a31
CyrenW32/Azorult.D.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Filecoder.AGP
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
KasperskyHEUR:Trojan.MSIL.Fsysna.gen
BitDefenderDropped:Generic.Ransom.HydraCrypt.97E650EF
MicroWorld-eScanDropped:Generic.Ransom.HydraCrypt.97E650EF
Ad-AwareDropped:Generic.Ransom.HydraCrypt.97E650EF
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34790.bm0@a4pAxao
TrendMicroRansom_ApisCryptor.R002C0DG921
McAfee-GW-EditionBehavesLike.Win32.Downloader.ph
FireEyeGeneric.mg.ec3d51f329a31315
EmsisoftDropped:Generic.Ransom.HydraCrypt.97E650EF (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1143485
eGambitUnsafe.AI_Score_99%
MicrosoftRansom:MSIL/ApisCryptor.PAA!MTB
GDataMSIL.Trojan-Ransom.Remind.DW1JQQ
McAfeeArtemis!EC3D51F329A3
MAXmalware (ai score=86)
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_ApisCryptor.R002C0DG921
RisingRansom.Destructor!1.B060 (CLASSIC)
IkarusTrojan-Ransom.FileCrypter
FortinetW32/Dapato!tr
AVGWin32:RansomX-gen [Ransom]
Paloaltogeneric.ml
Qihoo-360HEUR/QVM20.1.81BD.Malware.Gen

How to remove Dropped:Generic.Ransom.HydraCrypt.97E650EF?

Dropped:Generic.Ransom.HydraCrypt.97E650EF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment