Categories: Ransom

Generic.Ransom.Spora.EEC612FD information

The Generic.Ransom.Spora.EEC612FD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.Spora.EEC612FD virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Guard pages use detected – possible anti-debugging.
Dynamic (imported) function loading detected
Uses Windows utilities to enumerate running processes
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Uses suspicious command line tools or Windows utilities

How to determine Generic.Ransom.Spora.EEC612FD?


File Info:
name: 404E663BDE65F1860679.mlwpath: /opt/CAPEv2/storage/binaries/6e02af0f8cdfe76a67a9e0699ef9c683f6f47a8afefba5659da3906bfe879ba7crc32: 7777FC6Amd5: 404e663bde65f1860679a1abea3fc866sha1: 1ec4677f29d190225d2f46d6d74aeb11032f472csha256: 6e02af0f8cdfe76a67a9e0699ef9c683f6f47a8afefba5659da3906bfe879ba7sha512: f76612b2595017a613820228e3436d3bd7852045edba350557ede8f2d533eca62e9c5928cf53711d9ba8ab3b185d877291fd17631fb2c4e77fea4c19e2faecc5ssdeep: 49152:nblXNZD9GPXnd3xxP3CPGtPcFblXNZD9GPXnd3xxP3CPGtPcFblXNZD9GPXnd3x8:bl9Nwd6hl9Nwd6hl9Nwd6hl9Nwd6type: PE32 executable (console) Intel 80386, for MS Windowstlsh: T19B269D30BA82D136E56101F04FB8EB9A55ADF9290F3647CF73D44A2D69319D20E36E63sha3_384: 966e7ee26abb522cb6a3cd6eaaccb75c2a215d6af2284ea755b640d22a8417856fc756cc9dc969bf4795046e371409dbep_bytes: e8c20c0000e974feffffcccccccccc80timestamp: 2021-10-08 12:51:12
Version Info:
CompanyName: MicrosoftFileDescription: Microsoft Protection ServiceProductName: MicrosoftTranslation: 0x0409 0x04b0

Generic.Ransom.Spora.EEC612FD also known as:

Lionic	Trojan.Win32.DelShad.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.34930
MicroWorld-eScan	DeepScan:Generic.Ransom.Spora.EEC612FD
FireEye	DeepScan:Generic.Ransom.Spora.EEC612FD
McAfee	GenericRXAA-AA!404E663BDE65
Cylance	Unsafe
Sangfor	Ransom.Win32.Spora.EEC612FD
K7AntiVirus	Trojan ( 0058a11a1 )
Alibaba	Ransom:Win32/Cryptolocker.c40ac2d8
K7GW	Trojan ( 0058a11a1 )
Cybereason	malicious.bde65f
BitDefenderTheta	AI:Packer.076849021C
Cyren	W32/Trojan.EUSA-5185
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Filecoder.OIE
TrendMicro-HouseCall	Ransom_Cryptolocker.R002C0DB822
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.DelShad.gen
BitDefender	DeepScan:Generic.Ransom.Spora.EEC612FD
Avast	Win32:MalwareX-gen [Trj]
Tencent	Malware.Win32.Gencirc.11e885d3
Ad-Aware	DeepScan:Generic.Ransom.Spora.EEC612FD
Emsisoft	DeepScan:Generic.Ransom.Spora.EEC612FD (B)
TrendMicro	Ransom_Cryptolocker.R002C0DB822
McAfee-GW-Edition	BehavesLike.Win32.Generic.rh
Sophos	Mal/Generic-S
GData	DeepScan:Generic.Ransom.Spora.EEC612FD
Jiangmin	Trojan.DelShad.brc
Avira	TR/FileCoder.hxueu
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Win32.DelShad
Gridinsoft	Ransom.Win32.AI.sa
Arcabit	DeepScan:Generic.Ransom.Spora.EEC612FD
ZoneAlarm	HEUR:Trojan.Win32.DelShad.gen
Microsoft	Ransom:Win32/Cryptolocker.PAD!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Ransomware/Win.Cryptolocker.C4851941
VBA32	Trojan.DelShad
Malwarebytes	Malware.AI.1426879145
Rising	Trojan.Filecoder!8.68 (CLOUD)
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	W32/Filecoder.OIE!tr.ransom
AVG	Win32:MalwareX-gen [Trj]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_70% (W)