Ransom

Generic.Ransom.Rapid.A038F9E5 (file analysis)

Malware Removal

The Generic.Ransom.Rapid.A038F9E5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.Rapid.A038F9E5 virus can do?

  • A process attempted to delay the analysis task.
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Attempts to delete volume shadow copies
  • Modifies boot configuration settings
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Likely virus infection of existing system binary
  • Clears Windows events or logs
  • Creates a copy of itself
  • Collects information to fingerprint the system
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

How to determine Generic.Ransom.Rapid.A038F9E5?


File Info:

crc32: 7A1549C2
md5: 8e5d03f254f0565a6baa32178f2db646
name: 8E5D03F254F0565A6BAA32178F2DB646.mlw
sha1: 0e6051dea0a32d9af27e1a87274c5b1e27004af6
sha256: 957af94a60bcd208c940e6044bcb8c5f467093e55b8010d23df2a3905442f618
sha512: 8c74de53d4774fd742b8b5f06bbc721a5d3da18de8eac27010134d73c0e4fb81260b0dbe24c3eb3390246037e44d67ca15b0332f95405e0fd40591388247c6f5
ssdeep: 12288:bP1hZus7pQqiiyuuFuawu2zhjWBv4+1FMUUfW75CXQfXTk1V6:3r1S+NjWx4+1SWV6QQn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.Rapid.A038F9E5 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 005249381 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.24249
CynetMalicious (score: 100)
ALYacTrojan.Ransom.Rapid
CylanceUnsafe
ZillyaTrojan.Filecoder.Win32.11316
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 005249381 )
Cybereasonmalicious.254f05
CyrenW32/S-e92481d4!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.Rapid.E
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Ransomware.Rapid-9830380-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGeneric.Ransom.Rapid.A038F9E5
NANO-AntivirusTrojan.Win32.Encoder.facxdo
SUPERAntiSpywareRansom.Rapid/Variant
MicroWorld-eScanGeneric.Ransom.Rapid.A038F9E5
TencentMalware.Win32.Gencirc.10b9b906
Ad-AwareGeneric.Ransom.Rapid.A038F9E5
SophosTroj/Rapid-B
ComodoTrojWare.Win32.Ransom.Filecoder.NOZ@7o64io
BitDefenderThetaAI:Packer.C2CB9AB01F
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_RAPID.THEAEAH
McAfee-GW-EditionBehavesLike.Win32.Generic.cm
FireEyeGeneric.mg.8e5d03f254f0565a
EmsisoftGeneric.Ransom.Rapid.A038F9E5 (B)
JiangminTrojan.Generic.cbrbc
WebrootW32.Malware.Gen
AviraHEUR/AGEN.1129609
eGambitUnsafe.AI_Score_99%
MicrosoftRansom:Win32/Robbinhood.AR!MTB
AegisLabTrojan.Win32.Generic.4!c
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan-Ransom.Filecoder.CF@gen
AhnLab-V3Trojan/Win32.Malex.C2401135
McAfeeGenericRXFN-WI!8E5D03F254F0
MAXmalware (ai score=100)
VBA32BScope.Trojan.Encoder
MalwarebytesRansom.Rapid
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_RAPID.THEAEAH
RisingRansom.FileCryptor!8.1A7 (C64:YzY0OhoGx19uAZzv)
YandexTrojan.GenAsa!7BgsmpUca54
SentinelOneStatic AI – Malicious PE
FortinetW32/Filecoder.NOZ!tr.ransom
AVGWin32:RansomX-gen [Ransom]
Paloaltogeneric.ml

How to remove Generic.Ransom.Rapid.A038F9E5?

Generic.Ransom.Rapid.A038F9E5 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment