Generic.Ransom.Cerber.C384C2FE (file analysis)

The Generic.Ransom.Cerber.C384C2FE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.Cerber.C384C2FE virus can do?

• Executable code extraction
• Enumerates user accounts on the system
• Creates RWX memory
• A process attempted to delay the analysis task.
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Uses Windows utilities for basic functionality
• Deletes its original binary from disk
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Mimics the file times of a Windows system file
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Attempts to identify installed AV products by installation directory
• Creates a copy of itself
• Uses suspicious command line tools or Windows utilities

How to determine Generic.Ransom.Cerber.C384C2FE?

File Info:
crc32: BC6F13BB
md5: a364bc8fac3573b67dadeb5180aaf008
name: A364BC8FAC3573B67DADEB5180AAF008.mlw
sha1: caab29df41e2c89056b23c3fc1af4bdcf7356d33
sha256: 311ec6620f3c8159dcc4b11d9d8be832ade884497487f68066e2d81265420d2d
sha512: e7f82ca2b98ac486a80107e62aa7bf89333fce82caf6dc1e80504da9ca5dc20c5b95779609d2cbd87718ed364e90e68c59f4468a98d0c22306549feb9538bc24
ssdeep: 3072:4wkCmDpCuON80RuMSAVjeOMXF2ud0LfM9PSCW:4wVmD680RhScjAXF8k9PSCW
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright Pepperers Stye
InternalName: mudslides
FileVersion: 4.4.0.24109
CompanyName: Pepperers Stye
ProductName: mudslides stiffish
ProductVersion: 4.4.0.24109
FileDescription: mudslides skil com sfm
OriginalFilename: mudslides.exe
Translation: 0x0409 0x04b0

Generic.Ransom.Cerber.C384C2FE also known as:

How to remove Generic.Ransom.Cerber.C384C2FE?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.