About “Generic.Ransom.Small.2CC70DD6” infection

The Generic.Ransom.Small.2CC70DD6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Ransom.Small.2CC70DD6 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Generic.Ransom.Small.2CC70DD6?


File Info:
name: CC042D71486FB0CBD20C.mlw
path: /opt/CAPEv2/storage/binaries/4677f00ef8ed83fa184f25661d55f47d9b0c93cc54cae08d73e3d3cc2eae9cfd
crc32: 238E99D9
md5: cc042d71486fb0cbd20c6efc4a714243
sha1: f0fcd53c05a052f28b0732b0f433d15c2185597a
sha256: 4677f00ef8ed83fa184f25661d55f47d9b0c93cc54cae08d73e3d3cc2eae9cfd
sha512: c08b850a883498b9724343d86d7f6d7d3ee34ead0b32e780d8e436bd3a1b7a89ce3109e55447d590129b7ad87a509d0a8217b65f8f48ed15b9d1f33c7a2fa976
ssdeep: 384:bndWqeuQwU3C6Y/tQERfqI6sLPgNJr16BUEIa89yHyglk9qfGu7Ev:bd5U3C6Y/tQIlopEXWyHLk9i7E
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T188A2082417E8C338E5FF2FBA9C7181100B75B912D83ADB6D1584605E1E73794CAE1BA3
sha3_384: 0a553290b7c9b632a81a74be332ab71ede5ddc407d78ec26707b0e1ad49c1955da73345699162dc99a4dd6076620cda5
ep_bytes: ff250020400001020304050607080000
timestamp: 2069-09-03 22:48:37

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Ra
FileVersion: 1.0.0.0
InternalName: Ra.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: Ra.exe
ProductName: Ra
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Generic.Ransom.Small.2CC70DD6 also known as:

Bkav	W32.AIDetectNet.01
Cynet	Malicious (score: 100)
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.1486fb
Cyren	W32/Ransom.IQ.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Filecoder.AK
APEX	Malicious
Kaspersky	HEUR:Trojan-Ransom.MSIL.Agent.gen
BitDefender	Generic.Ransom.Small.2CC70DD6
MicroWorld-eScan	Generic.Ransom.Small.2CC70DD6
Ad-Aware	Generic.Ransom.Small.2CC70DD6
Sophos	Troj/Cryptear-A
DrWeb	Trojan.Encoder.10598
VIPRE	Generic.Ransom.Small.2CC70DD6
TrendMicro	Ransom_RAMSIL.SM
FireEye	Generic.mg.cc042d71486fb0cb
Emsisoft	Generic.Ransom.Small.2CC70DD6 (B)
SentinelOne	Static AI – Malicious PE
GData	MSIL.Trojan-Ransom.Cryptear.R
Avira	TR/Dropper.MSIL.Gen
MAX	malware (ai score=84)
Arcabit	Generic.Ransom.Small.2CC70DD6
Google	Detected
Acronis	suspicious
VBA32	Ransom.MSIL.Chaos.Heur
ALYac	Generic.Ransom.Small.2CC70DD6
TrendMicro-HouseCall	Ransom_RAMSIL.SM
Rising	Trojan.Generic/MSIL@AI.95 (RDM.MSIL:trbakUf7DcntfgJNFcol1Q)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Filecoder.AK!tr.ransom
BitDefenderTheta	Gen:NN.ZemsilF.34682.bm0@aqON1r

How to remove Generic.Ransom.Small.2CC70DD6?

Generic.Ransom.Small.2CC70DD6 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X