Ransom

What is “Ransom:Win32/Simlosap.A”?

Malware Removal

The Ransom:Win32/Simlosap.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win32/Simlosap.A virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Ransom:Win32/Simlosap.A?


File Info:

crc32: 5B137BE0
md5: 3f29c8dc57b919494458eb1ab84fa00d
name: 3F29C8DC57B919494458EB1AB84FA00D.mlw
sha1: 53bdfc0a3067947523fc14f937fe0fb4460ccc48
sha256: 4b5f8805a4c416cdd2d0b0c155deaef7363453125e39c3136fa41a394f4557a7
sha512: 487798e3eab763b704fa3fd64fe4c988309361567e5b00208ba8c5fd3321ada08e538cde17ea460a814bfd14222652f7b52a691ee5f5938aa4c110a2516fae6d
ssdeep: 12288:zSY9aHA9OWHFzHaqxSjxspvZhsKOhxM7:piA9OWlz6qmx8hnOhxu
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Ransom:Win32/Simlosap.A also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 7000000f1 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.1041
CynetMalicious (score: 100)
ALYacDeepScan:Generic.Ransom.Cryak.DFE35E4B
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
K7GWTrojan ( 7000000f1 )
Cybereasonmalicious.c57b91
CyrenW32/Filecoder.U.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.EQ
APEXMalicious
AvastFileRepMalware
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Ransom.Cryak.DFE35E4B
NANO-AntivirusTrojan.Win32.Encoder.dtfjdj
MicroWorld-eScanDeepScan:Generic.Ransom.Cryak.DFE35E4B
TencentWin32.Trojan.Filecoder.Llhp
Ad-AwareDeepScan:Generic.Ransom.Cryak.DFE35E4B
SophosMal/Generic-S
ComodoMalware@#fm0upcf6k7d1
BitDefenderThetaGen:NN.ZelphiF.34690.OKW@aiyDuhk
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Flyagent.jm
FireEyeGeneric.mg.3f29c8dc57b91949
EmsisoftDeepScan:Generic.Ransom.Cryak.DFE35E4B (B)
SentinelOneStatic AI – Suspicious PE
AviraTR/Crypt.XPACK.Gen3
eGambitUnsafe.AI_Score_100%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftRansom:Win32/Simlosap.A
ArcabitDeepScan:Generic.Ransom.Cryak.DFE35E4B
AegisLabTrojan.Multi.Generic.4!c
GDataDeepScan:Generic.Ransom.Cryak.DFE35E4B
TACHYONTrojan/W32.Cryakl.663552
AhnLab-V3Trojan/Win32.Delf.R153615
McAfeeGenericR-DVB!3F29C8DC57B9
MAXmalware (ai score=82)
MalwarebytesMalware.AI.4183157590
PandaTrj/CI.A
RisingRansom.Simlosap!8.4EE0 (CLOUD)
IkarusTrojan-PWS.Win32.Delf
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/Filecoder.EQ!tr
AVGFileRepMalware

How to remove Ransom:Win32/Simlosap.A?

Ransom:Win32/Simlosap.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment