Ransom

Ransom:Win32/Snake.A (file analysis)

Malware Removal

The Ransom:Win32/Snake.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win32/Snake.A virus can do?

  • Network activity detected but not expressed in API logs

How to determine Ransom:Win32/Snake.A?


File Info:

crc32: 4B97BB23
md5: f58a00d132205045f8aa4c765239301f
name: tmp4_tjr85c
sha1: b931198e02d6bd935c2a3c4f0b1ab8433f8cfefd
sha256: dc403cfef757e9bcb3eaa3cc89f8174fc8de5eef64a0e0ee5e5698991f0437f9
sha512: 719b5eab44d7058ba1de4dd247dc39271750a5cd2758a847f5ef38add04213f0a3d4d567aadd8adba7c2f91d4cd23d4ada405b13179fbf80691002d7029c8d71
ssdeep: 49152:NLpNltFlwVK8sD4ZS22aHKjzF/33Dd8L9AKyyXP02+:ntrwkMKfF
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Ransom:Win32/Snake.A also known as:

MicroWorld-eScanGen:Variant.Ransom.Ekans.3
CAT-QuickHealRansom.Snake.S13954503
Qihoo-360Win32/Trojan.Ransom.d39
McAfeeRansom-Ekans!F58A00D13220
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7AntiVirusTrojan ( 0056897f1 )
AlibabaRansom:Win32/Snake.f4b5c948
K7GWTrojan ( 0056897f1 )
CrowdStrikewin/malicious_confidence_70% (W)
CyrenW32/Ransom.SQDZ-8602
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/Filecoder.Snake.A
APEXMalicious
Paloaltogeneric.ml
GDataGen:Variant.Ransom.Ekans.3
KasperskyTrojan-Ransom.Win32.Snake.g
BitDefenderGen:Variant.Ransom.Ekans.3
RisingRansom.Snake!8.1170E (CLOUD)
TACHYONRansom/W32.Snake.3965952
SophosMal/Generic-S
F-SecureTrojan.TR/Redcap.amphx
DrWebTrojan.Encoder.31986
ZillyaTrojan.Snake.Win32.1
TrendMicroRansom_Snake.R02DC0DFD20
McAfee-GW-EditionBehavesLike.Win32.Downloader.wm
EmsisoftGen:Variant.Ransom.Ekans.3 (B)
JiangminTrojan.Snake.a
WebrootW32.Ransom.Gen
AviraTR/Redcap.amphx
Antiy-AVLTrojan[Ransom]/Win32.Snake
ArcabitTrojan.Ransom.Ekans.3
AegisLabTrojan.Win32.Snake.trnb
ZoneAlarmTrojan-Ransom.Win32.Snake.g
MicrosoftRansom:Win32/Snake.A
CynetMalicious (score: 85)
AhnLab-V3Trojan/Win32.SnakeRansom.R339638
VBA32TrojanRansom.Snake
ALYacTrojan.Ransom.SnakeLocker
MAXmalware (ai score=85)
Ad-AwareGen:Variant.Ransom.Ekans.3
MalwarebytesRansom.Ekans
TrendMicro-HouseCallRansom_Snake.R02DC0DFD20
TencentMalware.Win32.Gencirc.1194de85
YandexTrojan.Filecoder!FwwiWinJk9M
IkarusTrojan-Ransom.Snake
FortinetW32/Snake.A!tr
AVGWin32:Trojan-gen
PandaTrj/CI.A

How to remove Ransom:Win32/Snake.A?

Ransom:Win32/Snake.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment