Ransom.455 (file analysis)

The Ransom.455 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.455 virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Ransom.455?


File Info:
name: 6B1FA57837B335C0366D.mlw
path: /opt/CAPEv2/storage/binaries/e395da0fd79bc25e02c8d7395221c95b38f7cdb462693dfac337dbb4aab2b3b1
crc32: 0ACE3A07
md5: 6b1fa57837b335c0366d43191a31e0ad
sha1: 4c666334fc479dc1dc742f5d9fb985566c34d7eb
sha256: e395da0fd79bc25e02c8d7395221c95b38f7cdb462693dfac337dbb4aab2b3b1
sha512: 12a6fb49f0d0048f0121a8bc319ed9a73eaf990420530b93b95da9ca98efc0fc80e387c889fc7033a0d733112c0ae5cf6eea6a0dbcf061f110a684a4cd8fba9c
ssdeep: 96:hz15Ik41mGIcvQOgdIR4Zey+PdI/WILa/qj:hR5ILX1voICsymI/WILa/W
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16C8108260DC60461EE4964FE58ACB22C511E6D5A333CA1F737D6043E1D754C21FB82CA
sha3_384: 1d442ab6d6c1402e0de67f50064143d4c7e3166384abd663d47225e9d34f99211aa299f5ffe0b334c27e9847a2857715
ep_bytes: e8872f0000e978feffff8bff558bec83
timestamp: 2017-07-25 13:43:50

Version Info:
0: [No Data]

Ransom.455 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Ransom.455
FireEye	Generic.mg.6b1fa57837b335c0
ALYac	Gen:Variant.Ransom.455
Sangfor	Trojan.Win32.Generic.8
Alibaba	Trojan:Win32/Emotet.195cf1d0
Cybereason	malicious.837b33
Symantec	Trojan.Gen.2
APEX	Malicious
ClamAV	Win.Malware.Emotet-6335636-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ransom.455
Tencent	Win32.Trojan.Generic.Wogl
Ad-Aware	Gen:Variant.Ransom.455
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.Crypt.AF@775sz4
DrWeb	Trojan.DownLoader25.692
TrendMicro	TROJ_GEN.R002C0PIG21
McAfee-GW-Edition	Emotet-FAL!6B1FA57837B3
Emsisoft	Gen:Variant.Ransom.455 (B)
GData	Win32.Trojan-Spy.Emotet.AP
Jiangmin	Trojan.Spora.yh
Antiy-AVL	Trojan/Generic.ASMalwFH.3E0AAD8
Kingsoft	Win32.Troj.Undef.(kcloud)
Arcabit	Trojan.Ransom.455
Microsoft	Trojan:Win32/Occamy.CE3
Cynet	Malicious (score: 100)
McAfee	Emotet-FAL!6B1FA57837B3
MAX	malware (ai score=86)
TrendMicro-HouseCall	TROJ_GEN.R002C0PIG21
Rising	Trojan.Generic@ML.89 (RDML:6hChiv+doG8FeOJmkcYQPQ)
Yandex	Trojan.DownLoader!aL2vGfrBcNA
Fortinet	W32/Kryptik.FUWF!tr
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Ransom.455?

Ransom.455 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X