Ransom

About “Generic.Ransom.GandCrab.C327D360” infection

Malware Removal

The Generic.Ransom.GandCrab.C327D360 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.GandCrab.C327D360 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Checks the CPU name from registry, possibly for anti-virtualization

Related domains:

ipv4bot.whatismyipaddress.com
dns1.soprodns.ru
nomoreransom.coin
nomoreransom.bit
dns2.soprodns.ru
gandcrab.bit

How to determine Generic.Ransom.GandCrab.C327D360?


File Info:

crc32: 6344D101
md5: 29fda101e277ae397e25e1e5a644882c
name: 29FDA101E277AE397E25E1E5A644882C.mlw
sha1: 84d85439638a086549d9daa179b2f7dfcffa9772
sha256: 3a086acfa24c55095a2e5c63ff5bc3b415b9c7dedaf6886aaa4f1bbb8a6497d3
sha512: 26e349bc9c2292ee3f68a571de09cb105c3fde4abafde82cbe70b1f35ad645499304cd3f2544e4bd9ff2a0f6724ce369830d415febc7a1310eab235c2273f64d
ssdeep: 1536:oZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd:mBounVyFHpfMqqDL2/Lkvd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.GandCrab.C327D360 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Ransom.GandCrab.C327D360
CAT-QuickHealTrojan.Mauvaise.SL1
McAfeeRansom-Gandcrab!29FDA101E277
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforWin.Ransomware.Gandcrab-6667060-0
K7AntiVirusTrojan ( 0053d33d1 )
BitDefenderGeneric.Ransom.GandCrab.C327D360
K7GWTrojan ( 00526c7b1 )
Cybereasonmalicious.1e277a
CyrenW32/S-700f8b9d!Eldorado
SymantecRansom.GandCrab!g4
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Ransomware.Gandcrab-6502432-0
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Inject.eyyizx
RisingRansom.GandCrab!1.B8D6 (RDMK:cmRtazp7utdGcbYeNEn920GmLclV)
Ad-AwareGeneric.Ransom.GandCrab.C327D360
EmsisoftGeneric.Ransom.GandCrab.C327D360 (B)
ComodoTrojWare.Win32.Ransom.GandCrab.B@7kn2ff
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.Encoder.31290
ZillyaTrojan.Filecoder.Win32.7162
TrendMicroRansom.Win32.GANDCRAB.SMIU
McAfee-GW-EditionBehavesLike.Win32.RansomGandcrab.kh
MaxSecureTrojan-Ransom.GandCrab.C
FireEyeGeneric.mg.29fda101e277ae39
SophosML/PE-A + Troj/GandCrab-A
IkarusTrojan-Ransom.GandCrab
JiangminTrojan.Generic.bzhzc
AviraTR/Dropper.Gen
MAXmalware (ai score=86)
Antiy-AVLHackTool/Win32.Inject
MicrosoftRansom:Win32/Gandcrab
GridinsoftMalware.Win32.Gen.cc!s1
ArcabitGeneric.Ransom.GandCrab.C327D360
SUPERAntiSpywareRansom.GandCrab/Variant
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan-Ransom.GandCrab.C
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.FileCoder.R221681
Acronissuspicious
VBA32BScope.Trojan.Chapak
ALYacGeneric.Ransom.GandCrab.C327D360
MalwarebytesRansom.GandCrab
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Filecoder.GandCrab.H
TrendMicro-HouseCallRansom.Win32.GANDCRAB.SMIU
TencentMalware.Win32.Gencirc.10b0b456
YandexTrojan.GenAsa!N5wkFSylebY
SentinelOneStatic AI – Malicious PE
eGambitTrojan.Generic
FortinetW32/GandCrab.B!tr.ransom
BitDefenderThetaGen:NN.ZexaF.34590.eyW@aO66Ongi
AVGWin32:RansomX-gen [Ransom]
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360HEUR/QVM20.1.9D5B.Malware.Gen

How to remove Generic.Ransom.GandCrab.C327D360?

Generic.Ransom.GandCrab.C327D360 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment