Categories: Ransom

Ransom.Microcop (file analysis)

The Ransom.Microcop is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom.Microcop virus can do?

A process attempted to delay the analysis task.
Reads data out of its own binary image
Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
Exhibits possible ransomware file modification behavior
Network activity detected but not expressed in API logs
Anomalous binary characteristics
Clears web history

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ransom.Microcop?


File Info:
crc32: CFCA94FEmd5: c30b770ed4e60beb23972392af2be97ename: upload_filesha1: 8d14cbd67c2b8a596cb2216f3fd64d881bd8f381sha256: faa47da24f0494f637c0264a6d1d53f033a693c5bce624b8e9d4c525dd0e2e9fsha512: 08daf7b5e8ad80d2f51d66ae7979a69a72fdde479bcf4385dacf9d10f9d9f92cf88b11410a35011b05ee96edd35cb8a40b7d1e1dab45397b5ebc08ffbb551750ssdeep: 24576:oRmJkcoQricOIQxiZY1iaDFiBVauhrbD+:NJZoQrbTFZY1iaDFiBbhrbitype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1FileVersion: 3, 3, 8, 1FileDescription: Translation: 0x0809 0x04b0

Ransom.Microcop also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ransom.Locked.2
Qihoo-360	Generic/Trojan.Script.e88
ALYac	Gen:Variant.Ransom.Locked.2
Cylance	Unsafe
K7AntiVirus	Trojan ( 0055e3ef1 )
BitDefender	Gen:Variant.Ransom.Locked.2
K7GW	Trojan ( 0055e3ef1 )
Cybereason	malicious.ed4e60
Invincea	Mal/Generic-S
Cyren	W32/Autoit.XNSP-2917
Symantec	Ransom.Cryptolocker
APEX	Malicious
Avast	AutoIt:Ransom-L [Trj]
ClamAV	Win.Malware.Autoit-6992337-0
Kaspersky	HEUR:Trojan-Ransom.Script.Encoder.gen
Alibaba	Ransom:Win32/Pocrimcrypt.88d0d2e2
NANO-Antivirus	Trojan.Win32.Ransom.hyzghh
AegisLab	Trojan.Win32.Autoit.lzM7
Ad-Aware	Gen:Variant.Ransom.Locked.2
Emsisoft	Gen:Variant.Ransom.Locked.2 (B)
Comodo	.UnclassifiedMalware@0
F-Secure	Heuristic.HEUR/AGEN.1110296
DrWeb	Trojan.Encoder.24597
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.AutoIt.CRYPTEIGHT.SMTH
McAfee-GW-Edition	BehavesLike.Win32.Dropper.cc
FireEye	Generic.mg.c30b770ed4e60beb
Sophos	Mal/Generic-S
GData	Gen:Variant.Ransom.Locked.2
Jiangmin	Trojan.Banker.Agent.cal
Avira	HEUR/AGEN.1110296
MAX	malware (ai score=80)
Antiy-AVL	Trojan[Ransom]/Win32.AutoItLock.a
Arcabit	Trojan.Ransom.Locked.2
ZoneAlarm	HEUR:Trojan-Ransom.Script.Encoder.gen
Microsoft	Ransom:Win32/Pocrimcrypt.A
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.FileCoder.R291305
McAfee	Artemis!C30B770ED4E6
Malwarebytes	Ransom.Microcop
ESET-NOD32	a variant of Win32/Filecoder.Crypt888.B
TrendMicro-HouseCall	Ransom.AutoIt.CRYPTEIGHT.SMTH
Rising	Ransom.Crypt888/Autoit!1.C27B (CLASSIC)
Ikarus	Trojan-Ransom.Crypt888
eGambit	Unsafe.AI_Score_80%
Fortinet	W32/Filecoder.DYB!tr
BitDefenderTheta	AI:Packer.E19D7A3317
AVG	AutoIt:Ransom-L [Trj]
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Autoit.AZA