Categories: Ransom

Mal/Generic-R + Troj/Ransom-VL (file analysis)

The Mal/Generic-R + Troj/Ransom-VL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-R + Troj/Ransom-VL virus can do?

Behavioural detection: Executable code extraction – unpacking
Creates RWX memory
Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Mal/Generic-R + Troj/Ransom-VL?


File Info:
name: F33DD971E15BA9F1BF30.mlwpath: /opt/CAPEv2/storage/binaries/ff9826a882d404b2095ae43e7b8e2485e6cfe8e7d33bcb3abc444c65e026c742crc32: 15FD754Bmd5: f33dd971e15ba9f1bf30b64b1ab396a0sha1: 535695529fd02e2d60b675d6968b43bd8cfc711asha256: ff9826a882d404b2095ae43e7b8e2485e6cfe8e7d33bcb3abc444c65e026c742sha512: 8afff5f1ca050d9aec0bcd51b52f5feba2abf76f9ef2d399b95490591c6953a4e4e41ef41c1ffbe8fad3d93c07d6e22821ec7eed2289eca7cb5583bc6a735558ssdeep: 3072:LuIg1uQ/HdfOjovvMbFY3hhy27nCkwJmlwj:W1xojuvMbFYqwitype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FCC3BF84B5C104BBF6E545FF84A1BB36FF34E9221B36A88B8314F7969D223C5551238Bsha3_384: 3c2440517c2b7f1d78c475ef2e149c7cc222cb4386f4e6f5222f97219e2694569f8585737d2bf52465cb2d758bc810caep_bytes: 60b800100000be06040000f7e68bf033timestamp: 2009-11-08 20:32:11
Version Info:
0: [No Data]

Mal/Generic-R + Troj/Ransom-VL also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.Mint.Zard.24
FireEye	Generic.mg.f33dd971e15ba9f1
CAT-QuickHeal	Ransom.Urausy.100041
McAfee	Ransom-FBOM!F33DD971E15B
Cylance	Unsafe
VIPRE	Trojan.Win32.Reveton.a (v)
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Urausy.da297a84
BitDefenderTheta	AI:Packer.377240B520
VirIT	Trojan.Win32.ScreenLocker.AKP
Cyren	W32/A-0e03c190!Eldorado
Symantec	Trojan.Gen
ESET-NOD32	Win32/LockScreen.APR
TrendMicro-HouseCall	TROJ_URAUSY.SMA
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Heur.Mint.Zard.24
NANO-Antivirus	Trojan.Win32.Winlock.dmjcvo
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
APEX	Malicious
Tencent	Malware.Win32.Gencirc.10c8f195
Ad-Aware	Gen:Heur.Mint.Zard.24
Sophos	Mal/Generic-R + Troj/Ransom-VL
Comodo	TrojWare.Win32.Kryptik.BCAS@4y03x0
DrWeb	Trojan.Winlock.8128
Zillya	Trojan.Foreign.Win32.20706
TrendMicro	TROJ_URAUSY.SMA
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ch
Emsisoft	Gen:Heur.Mint.Zard.24 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Heur.Mint.Zard.24
Jiangmin	Trojan/Foreign.gpw
eGambit	Generic.Malware
Avira	TR/Crypt.ZPACK.Gen7
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Generic.ASMalwS.204AB1
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Ransom:Win32/Urausy.C
AhnLab-V3	Trojan/Win32.Foreign.R67654
VBA32	OScope.Malware-Cryptor.Hlux
ALYac	Gen:Heur.Mint.Zard.24
Avast	Win32:Crypt-PLE [Trj]
Rising	Ransom.Urausy!8.2B7 (CLOUD)
Yandex	Trojan.Foreign!VD43Lx7S6yg
Ikarus	Trojan.Win32.Urausy
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/LockScreen.APR!tr
Webroot	W32.Rogue.Gen
AVG	Win32:Crypt-PLE [Trj]
Cybereason	malicious.1e15ba
Panda	Trj/Genetic.gen