Categories: Ransom

What is “Generic.Ransom.CryLock.1271E56A”?

The Generic.Ransom.CryLock.1271E56A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.CryLock.1271E56A virus can do?

Creates RWX memory
A process attempted to delay the analysis task.
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial language used in binary resources: Russian
Writes a potential ransom message to disk
Anomalous binary characteristics

How to determine Generic.Ransom.CryLock.1271E56A?


File Info:
crc32: 9487C5A9md5: 823ae67e74fd9e95a40c7d3e4d0d7805name: upload_filesha1: 5f232a9d4a00ff67a370e804fdbe195ef6c2717esha256: ede64c15feef1b185c1a4b5727972c8ad66f7dfe86a095921bf45bf872f8d0ddsha512: 3d67041fec556659125c6c5616cf6525f1b531d681b3f4200614ed8583a06df9c78139684eec74e6abaae0fea17bea9cdb0d481ba2204e0c1e30cbe1eb10a672ssdeep: 12288:nnkYRHEZn1RMhWkiRnsV1pjlwBnISUcE2tLdefesKxt5Z3y+pIhfJhkiMyrT/dv1:kYRkLRMhWK1vwoGLdEesKxt5Z3y+pIhxtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Generic.Ransom.CryLock.1271E56A also known as:

Qihoo-360	Generic/Trojan.c63
McAfee	GenericRXLG-QQ!823AE67E74FD
Cylance	Unsafe
AegisLab	Trojan.Win32.Cryakl.j!c
Sangfor	Malware
K7AntiVirus	Trojan ( 004c1e461 )
BitDefender	DeepScan:Generic.Ransom.CryLock.1271E56A
K7GW	Trojan ( 004c1e461 )
Cybereason	malicious.d4a00f
Arcabit	DeepScan:Generic.Ransom.CryLock.1271E56A
Invincea	Mal/Generic-R + Mal/Delf-CL
Cyren	W32/Filecoder.U.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Filecoder.EQ
APEX	Malicious
Cynet	Malicious (score: 85)
Kaspersky	HEUR:Trojan-Ransom.Win32.Cryakl.gen
Alibaba	Ransom:Win32/FileCryptor.ea19adf2
NANO-Antivirus	Trojan.Win32.Encoder.hljpwf
MicroWorld-eScan	DeepScan:Generic.Ransom.CryLock.1271E56A
Rising	Ransom.CryLock!1.C7BA (CLASSIC)
Ad-Aware	DeepScan:Generic.Ransom.CryLock.1271E56A
Emsisoft	DeepScan:Generic.Ransom.CryLock.1271E56A (B)
Comodo	Malware@#3v9amm8sdesj3
F-Secure	Trojan.TR/FileCoder.dtrps
DrWeb	Trojan.Encoder.567
Zillya	Trojan.Filecoder.Win32.15068
TrendMicro	Ransom_FileCryptor.R002C0DGH20
McAfee-GW-Edition	BehavesLike.Win32.Rootkit.jh
FireEye	Generic.mg.823ae67e74fd9e95
Sophos	Mal/Delf-CL
Avira	TR/FileCoder.dtrps
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Ransom]/Win32.Cryakl
Microsoft	Ransom:Win32/FileCryptor.K!MTB
ViRobot	Trojan.Win32.Z.Filecoder.681984
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Cryakl.gen
GData	DeepScan:Generic.Ransom.CryLock.1271E56A
AhnLab-V3	Malware/Win32.Generic.C4093781
BitDefenderTheta	Gen:NN.ZelphiF.34570.PGW@aOgCwKbc
ALYac	Trojan.Ransom.Cryakl
VBA32	TScope.Trojan.Delf
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_FileCryptor.R002C0DGH20
Yandex	Trojan.Filecoder!neSeGMyGhSg
Ikarus	Trojan-Ransom.FileCrypter
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Filecoder.EQ!tr.ransom
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (W)