Ransom:Win32/Milicry.A (file analysis)

The Ransom:Win32/Milicry.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom:Win32/Milicry.A virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Ransom:Win32/Milicry.A?


File Info:
crc32: ED3B1380
md5: 5c3c4e8bee9b9cc5f9c63e53deb586c7
name: 5C3C4E8BEE9B9CC5F9C63E53DEB586C7.mlw
sha1: 2c42c4ac32fb5e59ea7b654bbb8ccf00c0d676f1
sha256: cdd3ae8b17ec87c763b6fef6e6473bde383620b448b52ca2472c8d95daeb4d5b
sha512: a4979156ce4d6bf7b4c5d73e4d543f41fc3c81466b629a879cff063e3695f567be975919961830d328b579ccb0307624567bb1c578aae6cc6c15d2d3acf02439
ssdeep: 3072:WlOSfaiCcnax/hXyu2J2VhBIvcTxHly7x0Feo+9MT7nmW+KAeQRBN37zUIJAZaQ8:afL9naphiuR/GcryF0Feo+49ixXUaQPK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ransom:Win32/Milicry.A also known as:

Bkav	W32.AIDetectGBM.malware.01
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.10433
MicroWorld-eScan	Trojan.GenericKD.33376828
FireEye	Generic.mg.5c3c4e8bee9b9cc5
McAfee	Artemis!5C3C4E8BEE9B
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004f78ba1 )
BitDefender	Trojan.GenericKD.33376828
K7GW	Trojan ( 004f78ba1 )
Cybereason	malicious.bee9b9
APEX	Malicious
ClamAV	Win.Ransomware.Sage-7144073-2
NANO-Antivirus	Trojan.Win32.SageCrypt.emreuv
Rising	Ransom.Milicry!8.A2F2 (TFE:5:LiFgZU12Z4T)
Ad-Aware	Trojan.GenericKD.33376828
Emsisoft	Trojan.GenericKD.33376828 (B)
Zillya	Trojan.SageCrypt.Win32.206
TrendMicro	Mal_MiliCry-2t
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dh
Sophos	Mal/Generic-S
Ikarus	Trojan-Ransom.FileCrypter
MAX	malware (ai score=84)
Antiy-AVL	Trojan[Ransom]/Win32.SageCrypt
Microsoft	Ransom:Win32/Milicry.A
Gridinsoft	Ransom.Win32.Gen.sm!s1
Arcabit	Trojan.Generic.D1FD4A3C
GData	Trojan.GenericKD.33376828
Cynet	Malicious (score: 100)
VBA32	BScope.TrojanRansom.Crusis
ALYac	Trojan.GenericKD.33376828
Malwarebytes	Malware.AI.4137706976
ESET-NOD32	a variant of Win32/Kryptik.FPXJ
TrendMicro-HouseCall	Mal_MiliCry-2t
Tencent	Malware.Win32.Gencirc.10bbd3b4
Yandex	Trojan.GenAsa!eUnaNDfGjIQ
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
CrowdStrike	win/malicious_confidence_80% (D)

How to remove Ransom:Win32/Milicry.A?

Ransom:Win32/Milicry.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X