Mamba.Ransom.FileCryptor.DDS information

The Mamba.Ransom.FileCryptor.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mamba.Ransom.FileCryptor.DDS virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Mamba.Ransom.FileCryptor.DDS?


File Info:
name: C64867C4BFEE46A33FB4.mlw
path: /opt/CAPEv2/storage/binaries/92db068a4ea653e1b5f95e39104d60284910fbc21f727d86c80ee08a1fd8c105
crc32: 3E3FF05D
md5: c64867c4bfee46a33fb4ec17d2f4e710
sha1: b1e70db7ed2e4be19ad03b8cfa6e9fc1dfc834db
sha256: 92db068a4ea653e1b5f95e39104d60284910fbc21f727d86c80ee08a1fd8c105
sha512: dac9028f9ffa631368c1ef8337191f792e4d726c0f361359524a2097e7bde942ccf48117229206a2bba8b50aa2c3e87f28b6d3bcdbd1d9eac033b8925496739c
ssdeep: 24576:E7rlnur7de8Rhp3vI6jOBcnjBgbolHB4XyhIr6tTK8u1NvVkZhgGmvvIZPByzh+0:Cr8LRHjOGjBlB4XyGOkNdV7
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T148955C02B790C138F9FB16F9557D6075983D7AE11B24C0D723C06AEE6A65AE0BC31B1B
sha3_384: a24bf1e115a75f5b22d9535ef1eaab1b9a6969afec3364006fc17ac64b63a0198f8fc02daed4cca71f5b850d4d264d2d
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-08-19 15:17:10

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 1.0.0.3
InternalName: ConsoleApp2.exe
LegalCopyright:  
OriginalFilename: ConsoleApp2.exe
ProductVersion: 1.0.0.3
Assembly Version: 1.0.0.2

Mamba.Ransom.FileCryptor.DDS also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.Bodegun.23
FireEye	Gen:Heur.Bodegun.23
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
McAfee	Ransomware-FTD!C64867C4BFEE
Malwarebytes	Mamba.Ransom.FileCryptor.DDS
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.7ed2e4
BitDefenderTheta	Gen:NN.ZemsilF.36196.3n0@a02DPQm
ESET-NOD32	a variant of MSIL/Filecoder.SLAM.A
APEX	Malicious
Kaspersky	HEUR:Trojan-Ransom.Win32.Generic
BitDefender	Gen:Heur.Bodegun.23
Avast	Win32:RansomX-gen [Ransom]
Emsisoft	Gen:Heur.Bodegun.23 (B)
F-Secure	Heuristic.HEUR/AGEN.1357339
VIPRE	Gen:Heur.Bodegun.23
McAfee-GW-Edition	Ransomware-FTD!C64867C4BFEE
Sophos	Mal/Cryptear-A
GData	Gen:Heur.Bodegun.23
Google	Detected
Avira	HEUR/AGEN.1357339
MAX	malware (ai score=88)
Arcabit	Trojan.Bodegun.23
ZoneAlarm	HEUR:Exploit.Win32.UAC.vho
Microsoft	Trojan:Win64/UACBypassExp.A!MTB
Cynet	Malicious (score: 99)
AhnLab-V3	Ransomware/Win.FTD.C5104835
VBA32	Trojan.MSIL.DelShad.Heur
ALYac	Gen:Heur.Bodegun.23
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Ransom.Destructor!1.B060 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Filecoder.AK!tr
AVG	Win32:RansomX-gen [Ransom]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Mamba.Ransom.FileCryptor.DDS?

Mamba.Ransom.FileCryptor.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X