What is “Ransom.Locky.A6”?

The Ransom.Locky.A6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.Locky.A6 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Ransom.Locky.A6?


File Info:
name: 6B74236C847C8D17A6BD.mlw
path: /opt/CAPEv2/storage/binaries/3a688c23eefa0dfb2dd6738df33cb35adae92ebe0573ceb935a9dd0093e6131f
crc32: 9061A6A8
md5: 6b74236c847c8d17a6bdb6589165d625
sha1: 724d5a8b27a1a3f6435789dba5517fea0b0d5c5d
sha256: 3a688c23eefa0dfb2dd6738df33cb35adae92ebe0573ceb935a9dd0093e6131f
sha512: 889a6e740eafc3818cfaae4408a84273667d8ce761721f70493653c1cf3a9d43aaccedc83e4b7c43a7df67f6514c3dca2bfa9222460950f812adb1a6f19192da
ssdeep: 3072:Uga1eGQLoi7V21GU15KQZyz2Sxw0nCa1s:UB1eL0l1gdvw0F+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ABA3F1736A94C9F8C859013656694B7FC63E96200021C393C7906E8BFD729F94B3FA56
sha3_384: b70b446d5981eb4337e066b449853bca42d09e39782e19e55f0ae102b8e125a7483698e30a0d4f112245894620bbd62e
ep_bytes: 558bec6aff6810914000686819400064
timestamp: 2009-10-07 12:47:16

Version Info:
0: [No Data]

Ransom.Locky.A6 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Malicious.4!c
Elastic	malicious (high confidence)
FireEye	Generic.mg.6b74236c847c8d17
CAT-QuickHeal	Ransom.Locky.A6
K7AntiVirus	Trojan ( 005189531 )
K7GW	Trojan ( 005189531 )
CrowdStrike	win/malicious_confidence_90% (W)
Cyren	W32/Risk.EWKE-7177
Symantec	Trojan.Gen.MBT
APEX	Malicious
ClamAV	Win.Trojan.Agent-187932
Rising	Malware.Heuristic!ET#95% (RDMK:cmRtazom66lpokvM8uzDpTwlHXbQ)
Sophos	Mal/Generic-S
DrWeb	Trojan.PWS.Gamania.36578
Zillya	Dropper.Agent.Win32.25709
McAfee-GW-Edition	BehavesLike.Win32.Trojan.cc
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDropper.Agent.aapv
Antiy-AVL	Trojan/Generic.ASMalwS.12D492
Microsoft	Trojan:Win32/Wacatac.B!ml
Gridinsoft	Ransom.Win32.Wacatac.sa
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	GenericRXQP-EI!6B74236C847C
TrendMicro-HouseCall	TROJ_GEN.R002H06KL21
Yandex	Trojan.GenAsa!E/lQakEmx58
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/PossibleThreat
Cybereason	malicious.b27a1a

How to remove Ransom.Locky.A6?

Ransom.Locky.A6 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X