Categories: Ransom

Ransom.Loki.8883 removal

The Ransom.Loki.8883 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom.Loki.8883 virus can do?

CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Korean
The binary likely contains encrypted or compressed data.
.NET file is packed/obfuscated with SmartAssembly
Authenticode signature is invalid
Anomalous .NET characteristics
Binary file triggered YARA rule

How to determine Ransom.Loki.8883?


File Info:
name: 987F7DA64563E6DF1BFF.mlwpath: /opt/CAPEv2/storage/binaries/8cda8fc64d6efbee7d7e5d9cab46664459ef1902c6d563282591ca4d36e3ba34crc32: D872CF74md5: 987f7da64563e6df1bff34d57a0d69b2sha1: 4e9f96cac7502d6d223419d663a302dcb53ba4b5sha256: 8cda8fc64d6efbee7d7e5d9cab46664459ef1902c6d563282591ca4d36e3ba34sha512: aa0793d2c61efcb8d5054d7e8a67e934286a5d6006e3a390b2918924d73853149fa402fc6f98c8e2cd0e8b03db34b83435da2ab1e58714970ab875218e7cc01assdeep: 3072:vYd8FAqSItjMVinxNq9r+JeWQjUaG6GfAmbWjbf5B1+I4FMaRE9GF1zxHraWGVnc:vYd8uWtyKq9rYeQaGNfA3j4TuC+WNW8type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12F44CF28CEBA988FEE5714329042F26507DCEF718B42CE77BCC4B42414B5BA6AD15B4Dsha3_384: c5c702632e98b5bc74d30a286a4a4afe268bba6a8ddee9229838070e474c99f84a94dc56d4be1901decb02d9b4256f75ep_bytes: ff250020400000000000000000000000timestamp: 2022-09-07 03:54:28
Version Info:
0: [No Data]

Ransom.Loki.8883 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.MSIL.Stealer.l!c
AVG	Win32:RATX-gen [Trj]
MicroWorld-eScan	Gen:Variant.Ransom.Loki.8883
FireEye	Generic.mg.987f7da64563e6df
Skyhigh	BehavesLike.Win32.Generic.dc
McAfee	Artemis!987F7DA64563
Malwarebytes	Trojan.Dropper
Zillya	Dropper.Agent.Win32.514588
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/runner.ali1000123
K7GW	Trojan ( 0059787b1 )
K7AntiVirus	Trojan ( 0059787b1 )
BitDefenderTheta	Gen:NN.ZemsilF.36802.qm0@aqx8DFbG
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/TrojanDropper.Agent.FPT
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender	Gen:Variant.Ransom.Loki.8883
Tencent	Malware.Win32.Gencirc.13bf9726
Emsisoft	Gen:Variant.Ransom.Loki.8883 (B)
F-Secure	Heuristic.HEUR/AGEN.1305758
DrWeb	Trojan.Inject4.45060
VIPRE	Gen:Variant.Ransom.Loki.8883
Trapmine	malicious.moderate.ml.score
Sophos	Mal/MSIL-VD
Ikarus	Trojan.MSIL.Crypt
Avira	HEUR/AGEN.1305758
Antiy-AVL	Trojan[Spy]/MSIL.Stealer
Kingsoft	malware.kb.c.977
Arcabit	Trojan.Ransom.Loki.D22B3
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Stealer.gen
GData	Gen:Variant.Ransom.Loki.8883
Google	Detected
AhnLab-V3	Trojan/Win.RATX-gen.C5235259
VBA32	TScope.Trojan.MSIL
ALYac	Gen:Variant.Ransom.Loki.8883
MAX	malware (ai score=89)
Cylance	unsafe
Panda	Trj/Chgt.AA
Rising	Malware.Obfus/MSIL@AI.92 (RDM.MSIL2:hRh/kNwwuP90YDVNfOwjcg)
Yandex	Trojan.DR.Agent!AWCkKMSsrFI
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.73709669.susgen
Fortinet	MSIL/Kryptik.AGSL!tr
Cybereason	malicious.64563e
DeepInstinct	MALICIOUS