Categories: Ransom

Generic.Ransom.Stampado.F477C03A (file analysis)

The Generic.Ransom.Stampado.F477C03A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.Stampado.F477C03A virus can do?

Creates RWX memory
Sniffs keystrokes
Exhibits behavior characteristic of Kibex Spyware/KeyBase Keylogger
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.Ransom.Stampado.F477C03A?


File Info:
crc32: 4024D5E5md5: 8ed037d3873fa7b7b5a9b04e517fb687name: 8ED037D3873FA7B7B5A9B04E517FB687.mlwsha1: 38d8a0b5dc599a6c78ff7feb1e9ec6b4fd437de4sha256: e964892e547ed454fe9927ae199ce77a9d316e23d06e65a258e4d6c51fe85221sha512: 9a6a4de099acf783816c780007147a4ae9d80c21cb5ad86dd921b8ac85c088722a1b6a7e78a13962cc55a57e7706ab5223e1a1974a3b534f26179f3195258200ssdeep: 24576:rXU09t8XLX8hf6VAYCG6WouT8wanOGNyFZLiG:rEutzfsCG5h9az8Ftitype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9 Karsten Funk under Creative Commons "by-nc-nd 3.0"InternalName: HMW - Hide my Windows_v3004_stripped_ppFileVersion: 3.0.0.4CompanyName: Karsten Funk. All rights reserved. https://funk.euMade By: Karsten FunkLegalTrademarks: by-nc-nd 3.0Comments: xa9 HMW - Hide my Windows, 2011-2020 by Karsten Funk. All rights reserved. https://funk.euProductName: HMW - Hide my WindowsPlatform: XP,Vista,Win7,Win8,Win81,Win10ProductVersion: 3.3.15.3FileDescription: HMW - Hide my WindowsAutoIt Version: 3.3.15.3Compile Date: 25.07.2020 12:38:27Translation: 0x0409 0x04b0

Generic.Ransom.Stampado.F477C03A also known as:

Bkav	W32.AIDetect.malware2
ClamAV	Win.Malware.Generic-9879926-0
CAT-QuickHeal	Trojan.GraftorPMF.S18362071
ALYac	Generic.Ransom.Stampado.F477C03A
Zillya	Trojan.Obfuscated.Win32.95080
BitDefender	Generic.Ransom.Stampado.F477C03A
APEX	Malicious
Cynet	Malicious (score: 100)
MicroWorld-eScan	Generic.Ransom.Stampado.F477C03A
Ad-Aware	Generic.Ransom.Stampado.F477C03A
F-Secure	Dropper.DR/AutoIt.Gen
McAfee-GW-Edition	BehavesLike.Win32.TrojanAitInject.th
FireEye	Generic.Ransom.Stampado.F477C03A
Emsisoft	Generic.Ransom.Stampado.F477C03A (B)
Jiangmin	AdWare.Script.gj
Avira	DR/AutoIt.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.30F6B20
Microsoft	Trojan:Win32/Tnega!ml
Arcabit	Generic.Ransom.Stampado.F477C03A
GData	Generic.Ransom.Stampado.F477C03A
MAX	malware (ai score=89)