Malware

About “Generic.Ranosm.Maktub.05A96CCE” infection

Malware Removal

The Generic.Ranosm.Maktub.05A96CCE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ranosm.Maktub.05A96CCE virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • The executable is likely packed with VMProtect
  • Detects Sandboxie through the presence of a library
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.Ranosm.Maktub.05A96CCE?


File Info:

crc32: BE64E204
md5: b3827b77390348632d29bb529e08b16c
name: B3827B77390348632D29BB529E08B16C.mlw
sha1: b593097b263273ed76163ef22d03920ae0076766
sha256: a4ec010b1a56fd7f0f6569b388d9dedabaa5162e099493526db1baf98edc5be9
sha512: c81a4dbf7b6d41312cf381a70e783a7ba30786232e2c6425233fee30d5264221a308becdc0fbf44470e908e2c6e8122418d55df4378d90def6fe3f7f981e7a9f
ssdeep: 12288:Vl510jshy0tiE3qzm6d2ls/4VyVTa+X2kulgFakX/bZjKH/:VxuqiE3qzBY1PdvU/le
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2013
InternalName: explorer
FileVersion: 6.6.3852.6120
CompanyName: Intel Corporation
PrivateBuild: 1
LegalTrademarks: Copyright (C) 2013
Comments: explorer
ProductName: explorer
SpecialBuild: 1
ProductVersion: 6.6.3852.6120
FileDescription: explorer
OriginalFilename: explorer
Translation: 0x0409 0x04b0

Generic.Ranosm.Maktub.05A96CCE also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0052faf11 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.25395
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Sigmal.S2666360
ALYacGeneric.Ranosm.Maktub.05A96CCE
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaRansom:Win32/Takbum.cfefe10e
K7GWTrojan ( 0052e4141 )
Cybereasonmalicious.739034
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Kryptik.GFUC
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Takbum.an
BitDefenderGeneric.Ranosm.Maktub.05A96CCE
NANO-AntivirusTrojan.Win32.Kryptik.faougk
MicroWorld-eScanGeneric.Ranosm.Maktub.05A96CCE
TencentWin32.Trojan.Takbum.Pepe
Ad-AwareGeneric.Ranosm.Maktub.05A96CCE
SophosMal/Generic-S
ComodoMalware@#23m9ra7bzix2q
BitDefenderThetaGen:NN.ZexaF.34692.1C0@aaIOkgaO
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Backdoor.cc
FireEyeGeneric.mg.b3827b7739034863
EmsisoftTrojan.Ransom (A)
SentinelOneStatic AI – Malicious PE
WebrootW32.Ransomware.Gen
AviraHEUR/AGEN.1100573
MicrosoftTrojan:Win32/Skeeyah.A!rfn
ArcabitGeneric.Ranosm.Maktub.05A96CCE
ZoneAlarmTrojan-Ransom.Win32.Takbum.an
GDataGeneric.Ranosm.Maktub.05A96CCE
AhnLab-V3Malware/Win32.Generic.C2472480
McAfeeGenericRXFC-QW!B3827B773903
MAXmalware (ai score=94)
VBA32BScope.Trojan.Downloader
MalwarebytesMalware.AI.3691120468
PandaTrj/Genetic.gen
RisingTrojan.Generic@ML.97 (RDML:ONy4nbQDOR93ZMDZsFwx9w)
YandexTrojan.GenAsa!p+rDMSV3vfI
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/RansomTak.A!tr
AVGWin32:Malware-gen

How to remove Generic.Ranosm.Maktub.05A96CCE?

Generic.Ranosm.Maktub.05A96CCE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment