Categories: Ransom

Ransom.Screenlocker.12 (file analysis)

The Ransom.Screenlocker.12 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom.Screenlocker.12 virus can do?

Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Ransom.Screenlocker.12?


File Info:
name: 3DCEEA95AF65D8B5F1DF.mlwpath: /opt/CAPEv2/storage/binaries/068bf62fa7964699e420a4301fc382fbbefebb4c779048b288cf5f9c5427f855crc32: DA06CC04md5: 3dceea95af65d8b5f1df9065d915b1fdsha1: 7aae7803cca380011bea2aaf9f9616fa220c60dcsha256: 068bf62fa7964699e420a4301fc382fbbefebb4c779048b288cf5f9c5427f855sha512: c1cb9aeb1162e57514757c91f07bdbf865b3a155eaef2d6172afa9aa76def627462de904702e6a5033affe902b1f8678453a6922769ec0962e9d93c4f3d86385ssdeep: 6144:cLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JfeiFPXoZP:I+u9nx2GjMY3XKfd/H/9WcPtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F6848D37FAD08433C1732A7D9C5B9B68AD29BE512D2824467BEC1E8C4F3D7927425293sha3_384: 424dc317be24ffd9a87378be3e4906c0586157bf1e21e80635a2aaff98b09868be60ce4571dc16e972461238d62b7de1ep_bytes: 558bec83c4f0b84c274500e84039fbfftimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Ransom.Screenlocker.12 also known as:

Bkav	W32.AIDetectMalware
AVG	Win32:LockScreen-AHV [Trj]
tehtris	Generic.Malware
DrWeb	Trojan.Winlock.3333
MicroWorld-eScan	Gen:Variant.Ransom.Screenlocker.12
FireEye	Generic.mg.3dceea95af65d8b5
CAT-QuickHeal	Ransom.Weenloc.A8
ALYac	Gen:Variant.Ransom.Screenlocker.12
Malwarebytes	LockScreen.Trojan.ScreenLocker.DDS
Sangfor	Ransom.Win32.Save.a
K7AntiVirus	Ransomware ( 0039911e1 )
K7GW	Ransomware ( 0039911e1 )
Cybereason	malicious.5af65d
Arcabit	Trojan.Ransom.Screenlocker.12
BitDefenderTheta	Gen:NN.ZelphiF.36662.yGW@aanMJueI
VirIT	Trojan.Win32.Ransomer.BSV
Cyren	W32/Delf.DC.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	Win32/LockScreen.AGU
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Ransomware.Lockscreen-9831110-0
Kaspersky	Trojan-Ransom.Win32.Blocker.jzec
BitDefender	Gen:Variant.Ransom.Screenlocker.12
NANO-Antivirus	Trojan.Win32.Ransom.crnep
SUPERAntiSpyware	Trojan.Agent/Gen-Ransom
Avast	Win32:LockScreen-AHV [Trj]
Tencent	Trojan-Ransom.Win32.Blocker.jzec
Sophos	ML/PE-A
F-Secure	Trojan.TR/ATRAPS.Gen
Baidu	Win32.Trojan.LockScreen.b
VIPRE	Gen:Variant.Ransom.Screenlocker.12
TrendMicro	Ransom_WINLOCK.SM
McAfee-GW-Edition	Trojan-FAZX!3DCEEA95AF65
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Ransom.Screenlocker.12 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Fullscreen.ak
Avira	TR/ATRAPS.Gen
MAX	malware (ai score=88)
Antiy-AVL	Trojan[Ransom]/Win32.PornoAsset.cioy
Xcitium	TrojWare.Win32.Ransom.Fullscreen.fgt@4t6ar8
Microsoft	Ransom:Win32/Weenloc
ZoneAlarm	Trojan-Ransom.Win32.Blocker.jzec
GData	Gen:Variant.Ransom.Screenlocker.12
Google	Detected
AhnLab-V3	Trojan/Win32.Atraps.R214152
Acronis	suspicious
McAfee	Trojan-FAZX!3DCEEA95AF65
VBA32	TrojanRansom.Blocker
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	Ransom_WINLOCK.SM
Rising	Trojan.Win32.Weenloc.a (CLASSIC)
Ikarus	Trojan-Ransom.Birele
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/LockScreen.AGU!tr
Zoner	Trojan.Win32.46437
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)