Categories: Ransom

Ransom.jumper.brn (file analysis)

The Ransom.jumper.brn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.jumper.brn virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Ransom.jumper.brn?


File Info:

crc32: A6E5F098md5: 01d723df2c1c94529515df3f2010aacbname: 01D723DF2C1C94529515DF3F2010AACB.mlwsha1: 6160c15f944ad0cb29fc5859b9ea555ad407bc8bsha256: 90339440bf9940ae9a3ab3d24a8c506ec9196a229ead0e68f3f0f25161ade362sha512: 39dd5fc0c9bbb5ce6d5be85158152080221769e1c974d46ff7919143961d891145fbf68e7d160e2aa41502a110ffb83be667ac705b4f2e927ff5d24e8ac21b1dssdeep: 24576:gPuBfZMVZfoABEghD2bcFxTj5ifcqfrYH:CuBKZfzEgN24FxTNifcq0Htype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: KirySoft Copyright xa9 1995-Present FileVersion: 8.4.2.2CompanyName: KirySoftProductName: ReproductionsYesProductVersion: 8.4.2.2FileDescription: Converts Delegatin Complement ArrangedTranslation: 0x0409 0x04b0

Ransom.jumper.brn also known as:

K7AntiVirus Trojan ( 005529251 )
Lionic Trojan.Win32.Foreign.tqEe
Elastic malicious (high confidence)
DrWeb Trojan.Encoder.25574
ALYac Trojan.Ransom.Foreign
Cylance Unsafe
Zillya Trojan.Kryptik.Win32.1682373
Sangfor Virus.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Ransom:Win32/Foreign.9400ceca
K7GW Trojan ( 005529251 )
Cybereason malicious.f2c1c9
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Kryptik.GURP
APEX Malicious
Avast Win32:Malware-gen
Cynet Malicious (score: 100)
Kaspersky Trojan-Ransom.Win32.Foreign.ogxi
BitDefender Gen:Variant.Ursu.533283
NANO-Antivirus Trojan.Win32.Encoder.ftfzle
ViRobot Trojan.Win32.S.Agent.851456.AO
MicroWorld-eScan Gen:Variant.Ursu.533283
Tencent Win32.Trojan.Foreign.Fid
Ad-Aware Gen:Variant.Ursu.533283
Sophos Mal/Generic-S + Troj/Inject-EJK
Comodo Malware@#1epxnmuoh374b
BitDefenderTheta Gen:NN.ZexaF.34142.Zu0@aCvQmJji
VIPRE Trojan.Win32.Generic!BT
TrendMicro Ransom.Win32.BUHTRAP.A
McAfee-GW-Edition BehavesLike.Win32.Dropper.cc
FireEye Generic.mg.01d723df2c1c9452
Emsisoft Gen:Variant.Ursu.533283 (B)
SentinelOne Static AI – Malicious PE
Jiangmin Trojan.Foreign.fqy
Webroot W32.Malware.Gen
Avira HEUR/AGEN.1125216
Antiy-AVL Trojan/Generic.ASMalwS.30D8595
Microsoft Trojan:Win32/Skeeyah.A!MTB
GData Gen:Variant.Ursu.533283
TACHYON Ransom/W32.Foreign.851456.B
AhnLab-V3 Malware/Win32.Generic.C3336927
Acronis suspicious
McAfee Artemis!01D723DF2C1C
MAX malware (ai score=100)
VBA32 BScope.TrojanRansom.Foreign
Malwarebytes Ransom.jumper.brn
Panda Trj/CI.A
TrendMicro-HouseCall Ransom.Win32.BUHTRAP.A
Rising Trojan.Generic@ML.92 (RDMK:rrCt63+GNN6QV6h9ki5+ow)
Yandex Trojan.Foreign!hJsWDIP/49c
Ikarus Trojan.Win32.Krypt
Fortinet W32/Foreign.DNGO!tr
AVG Win32:Malware-gen
Paloalto generic.ml

How to remove Ransom.jumper.brn?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

About “Trojan-Spy.Win32.Zbot.zruy” infection

The Trojan-Spy.Win32.Zbot.zruy is considered dangerous by lots of security experts. When this infection is active,…

31 seconds ago

Worm.Win32.Vobfus.efrj removal guide

The Worm.Win32.Vobfus.efrj is considered dangerous by lots of security experts. When this infection is active,…

5 mins ago

Trojan.Win32.Agent.xbocbt removal tips

The Trojan.Win32.Agent.xbocbt is considered dangerous by lots of security experts. When this infection is active,…

10 mins ago

PUP.Optional.eSupportNTFSUndelete malicious file

The PUP.Optional.eSupportNTFSUndelete is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

What is “Trojan:MSIL/AgentTesla.KABA!MTB”?

The Trojan:MSIL/AgentTesla.KABA!MTB is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

PWS:Win32/OnLineGames.IM information

The PWS:Win32/OnLineGames.IM is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago