Categories: Ransom

Ransom:Win32/Sodinokibi.SK!MSR removal

The Ransom:Win32/Sodinokibi.SK!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom:Win32/Sodinokibi.SK!MSR virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Ransom:Win32/Sodinokibi.SK!MSR?


File Info:
crc32: 0350F346md5: cda38f8f2f89f22903afed7bd9a7a11bname: CDA38F8F2F89F22903AFED7BD9A7A11B.mlwsha1: 6ac610cf9598a4d50c7719b1f6774bc3005a84efsha256: 43f1ae6d5d8572e0797a4add299d0dc41d9ca09a9542a436b307b9bd6e843876sha512: bd109d7141322c62638017493b50bf89563c118e115bf99aba498f0334ce19e81992881ecd5792c585fdda6c050e333b4895d7e56958e2c513d066a1d1570708ssdeep: 12288:iO8QECmqRlz2JlMOrx+5AA/pz3294h3DBNtEX4yIj8ItDuFKjEoRvnWYBHxeWXK:rPmqRlZ+x9q3J3KejvDxjEoRvnWKx9Ktype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
InternalSurname: dhrj.uxeCopyrights: Copyrighd (C) 2020, dhsfkFileVersion: 8.6.1ProductionVers: 1.20.4.2TranslationUsi: 0x0482 0x0b39

Ransom:Win32/Sodinokibi.SK!MSR also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0056acd41 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Heur.Mint.Dreidel.ar3@xi5HkxkG
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/runner.ali1000123
K7GW	Trojan ( 0056acd41 )
Cybereason	malicious.f2f89f
Cyren	W32/Kryptik.BRE.gen!Eldorado
ESET-NOD32	a variant of Win32/Kryptik.HEZA
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
ClamAV	Win.Dropper.Tofsee-8964103-0
Kaspersky	UDS:Trojan.Win32.Chapak.gen
BitDefender	Gen:Heur.Mint.Dreidel.ar3@xi5HkxkG
NANO-Antivirus	Trojan.Win32.Chapak.hoitki
MicroWorld-eScan	Gen:Heur.Mint.Dreidel.ar3@xi5HkxkG
Ad-Aware	Gen:Heur.Mint.Dreidel.ar3@xi5HkxkG
Sophos	ML/PE-A + Mal/Kryptik-EA
BitDefenderTheta	Gen:NN.ZexaF.34678.ar3@ai5HkxkG
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Emotet.tc
FireEye	Generic.mg.cda38f8f2f89f229
Emsisoft	Gen:Heur.Mint.Dreidel.ar3@xi5HkxkG (B)
Jiangmin	Backdoor.Tofsee.cpt
Avira	TR/Crypt.XPACK.Gen5
Microsoft	Ransom:Win32/Sodinokibi.SK!MSR
Arcabit	Trojan.Mint.Dreidel.E66B70
GData	Gen:Heur.Mint.Dreidel.ar3@xi5HkxkG
AhnLab-V3	Malware/Win32.RL_Generic.R350657
Acronis	suspicious
McAfee	Lockbit-GCZ!CDA38F8F2F89
MAX	malware (ai score=87)
VBA32	BScope.Trojan.Hynamer
Malwarebytes	Trojan.SmokeLoader
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_Sodinokibi.R002C0DDN21
Rising	Trojan.Kryptik!1.C931 (CLOUD)
Yandex	Trojan.Kryptik!jU3iXnNDbUg
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.HFZD!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml