Categories: Ransom

Ransom.TeslaCrypt.98 malicious file

The Ransom.TeslaCrypt.98 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom.TeslaCrypt.98 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Ransom.TeslaCrypt.98?


File Info:
name: 3C0B5CE355CBCA0AFF12.mlwpath: /opt/CAPEv2/storage/binaries/a1fd62d0ebb866daefe518b855cc9cb6f793ef6dcfdc646b41f231330199b3facrc32: DC8065E7md5: 3c0b5ce355cbca0aff12207d2ccf5d7bsha1: 7674b02e857d2ce400dc4ff82bd265635ba0faccsha256: a1fd62d0ebb866daefe518b855cc9cb6f793ef6dcfdc646b41f231330199b3fasha512: 754cabec4659340bef0dc8f0eef3508be5192971affb4d3f96cafe94ea620abe751a427ac44af746f7a212086c3a262fd290380342fe894a6f47d8a1362d2c8cssdeep: 6144:ShXZ7hMTNFH8LAurlEzAX7oAwfSZ4sXjzQIk:gpVMjqrllX7XwMEIktype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B7C46C76BE8054F3CF916872025E177EF736E14456298DC3C36CEDAA1827A11AD2E38Dsha3_384: 8ecb91145e87d766bea710989149a47ba3593c98f3e05e06c1bebc48a96917e93cd34bb0a12d23b81b8e4047e85bf094ep_bytes: 558bec6aff685864420068f8fb410064timestamp: 2002-04-23 02:20:57
Version Info:
FileDescription: FileVersion:  5.1.0.0OriginalFilename: divxenc.exeProductVersion: 5.1.0.0Translation: 0x0409 0x04e4

Ransom.TeslaCrypt.98 also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
DrWeb	Adware.Gator.455
MicroWorld-eScan	Gen:Variant.Ransom.TeslaCrypt.98
CAT-QuickHeal	Trojan.Fuerboos.S18269168
Skyhigh	BehavesLike.Win32.PUPXAX.hz
ALYac	Gen:Variant.Ransom.TeslaCrypt.98
Malwarebytes	Gator.Adware.Advertising.DDS
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 004bcce41 )
K7GW	Adware ( 004ba2051 )
CrowdStrike	win/grayware_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaF.36802.Hq3@aCRZfJbi
VirIT	Spyware.Trickler
Symantec	SMG.Heur!gen
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Adware.Gator.Trickler.I
APEX	Malicious
ClamAV	Win.Trojan.Generic-6221838-0
Kaspersky	not-a-virus:AdWare.Win32.Gator.fg
BitDefender	Gen:Variant.Ransom.TeslaCrypt.98
NANO-Antivirus	Trojan.Win32.Gator.dogjis
SUPERAntiSpyware	Adware.Gator/Variant
Avast	Win32:Adware-DNA [Adw]
Tencent	Trojan.Win32.Gator.wb
Emsisoft	Gen:Variant.Ransom.TeslaCrypt.98 (B)
Google	Detected
F-Secure	Adware:W32/Gator.I
Baidu	Win32.Adware.Agent.n
VIPRE	Gen:Variant.Ransom.TeslaCrypt.98
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.3c0b5ce355cbca0a
Sophos	GAIN (PUA)
Ikarus	AdWare.Gator
Jiangmin	AdWare.Gator.ht
Varist	W32/Gator.J.gen!Eldorado
Avira	HEUR/AGEN.1339069
Antiy-AVL	GrayWare[AdWare]/Win32.Trickler
Kingsoft	malware.kb.a.1000
Microsoft	Trojan:Win32/Trickler!pz
Arcabit	Trojan.Ransom.TeslaCrypt.98
ZoneAlarm	not-a-virus:AdWare.Win32.Gator.fg
GData	Gen:Variant.Ransom.TeslaCrypt.98
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	GenericRXNB-JJ!3C0B5CE355CB
MAX	malware (ai score=89)
VBA32	BScope.Adware.Gator
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Adware.Gator!1.A7ED (CLASSIC)
Yandex	Trojan.GenAsa!pLIck0qZYxY
SentinelOne	Static AI – Malicious PE
MaxSecure	Virus.W32.Adware.Gator.3202
Fortinet	Adware/Trickler
AVG	Win32:Adware-DNA [Adw]
Cybereason	malicious.355cbc
DeepInstinct	MALICIOUS
alibabacloud	Adware:Win/Trickler.B(dyn)