Ransom

About “Generic.Ransom.Mole.10DF4F02” infection

Malware Removal

The Generic.Ransom.Mole.10DF4F02 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.Mole.10DF4F02 virus can do?

  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities to create a scheduled task
  • Deletes executed files from disk
  • Uses suspicious command line tools or Windows utilities
  • Suspicious wmic.exe use was detected
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Ransom.Mole.10DF4F02?


File Info:

name: 9A30BA1E7B3CCEEC366F.mlw
path: /opt/CAPEv2/storage/binaries/eb46e4e604b11a0f1ce777a22542c3222f832644b90854052b1f41246f42dc33
crc32: 533CDBAC
md5: 9a30ba1e7b3cceec366f7b692f0a9609
sha1: 874bd59c6d0f5b271a07bbed7d47926739279893
sha256: eb46e4e604b11a0f1ce777a22542c3222f832644b90854052b1f41246f42dc33
sha512: 50c5639f5742f9bca03130e9d577e9156d23c4eebdf9b674b25d16873763e31808d3974f63a049eb38e0f68f956614d2be14fa6f8c09e2757cc5400240285195
ssdeep: 12288:xcv0NTZYodFjviAawWbXEmkgv9TAXrSo4vUl/uqBjDrVmpI6SNEtEqVt8np2JXCK:xcvkTZYPd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16E844CE662704272EFE40FF4449062B90A357E742EDA154B766C38EF7CA1F51B8182DB
sha3_384: d9e34122962ef32ded8723b958abe0a91507830a13645e7466bb807461d3e645f1e9a7188823b670321c00e06317a88c
ep_bytes: 68ac00000068000000006810804100e8
timestamp: 2019-07-30 08:52:50

Version Info:

0: [No Data]

Generic.Ransom.Mole.10DF4F02 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
McAfeeArtemis!9A30BA1E7B3C
Cylanceunsafe
ZillyaTool.Lazagne.Win32.102
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
VirITTrojan.Win32.Genus.IHW
CyrenW32/Trojan.VFBA-8001
SymantecML.Attribute.HighConfidence
APEXMalicious
BitDefenderDeepScan:Generic.Ransom.Mole.10DF4F02
MicroWorld-eScanDeepScan:Generic.Ransom.Mole.10DF4F02
AvastWin32:Trojan-gen
Ad-AwareDeepScan:Generic.Ransom.Mole.10DF4F02
EmsisoftDeepScan:Generic.Ransom.Mole.10DF4F02 (B)
VIPREDeepScan:Generic.Ransom.Mole.10DF4F02
McAfee-GW-EditionBehavesLike.Win32.Generic.fm
FireEyeGeneric.mg.9a30ba1e7b3cceec
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Malicious PE
Antiy-AVLTrojan/Win32.Tiggre
Kingsoftmalware.kb.a.797
ArcabitDeepScan:Generic.Ransom.Mole.10DF4F02
GDataDeepScan:Generic.Ransom.Mole.10DF4F02
GoogleDetected
AhnLab-V3Trojan/Win.Trojan-gen.R570436
ALYacDeepScan:Generic.Ransom.Mole.10DF4F02
MAXmalware (ai score=88)
MalwarebytesMalware.AI.392946571
ZonerTrojan.Win32.85523
RisingTrojan.Generic@AI.99 (RDML:H8huK+3wL4cIuuCDOzdb/g)
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:Trojan-gen
Cybereasonmalicious.e7b3cc
DeepInstinctMALICIOUS

How to remove Generic.Ransom.Mole.10DF4F02?

Generic.Ransom.Mole.10DF4F02 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment