Categories: Ransom

Ransom:Win32/StopCrypt.MAK!MTB (file analysis)

The Ransom:Win32/StopCrypt.MAK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom:Win32/StopCrypt.MAK!MTB virus can do?

A process attempted to delay the analysis task.
Installs itself for autorun at Windows startup
Writes a potential ransom message to disk
Attempts to modify proxy settings
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

api.2ip.ua

bruze2.ug

How to determine Ransom:Win32/StopCrypt.MAK!MTB?


File Info:
crc32: E8C6578Bmd5: f933dd4cd0f9b72453e8249e3b6bbf11name: F933DD4CD0F9B72453E8249E3B6BBF11.mlwsha1: 37c2ee553dfbba9682cb7b7ac3504adee3fc26c2sha256: 96b6e097f79c99aa21d05542bd4a6317303a28aaf6fb4ff0f790a7f701747979sha512: baee21cb37fc8ad18deb63e0f95e36d90433e95c8a00b8aa47c09ecc05c8b8d4f56577356fcdf6d894b4630c30117c556145a87edd6d7cf6d3748a4fd1b08011ssdeep: 6144:30TB+M5xLHIjSKlK1Yt6W+a03f1ZaPnqzHxzGvO2uuAGqxr:30TB+VSKlK+t6fayuPchT2vqxtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Ransom:Win32/StopCrypt.MAK!MTB also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005455b71 )
Lionic	Trojan.Win32.Stop.j!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.26996
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.STOP.S6701406
ALYac	Trojan.Ransom.Stop
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win32.9345
Sangfor	Ransom.Win32.STOP.BS!MTB
Alibaba	Ransom:Win32/generic.ali2000027
K7GW	Trojan ( 005455b71 )
Cybereason	malicious.cd0f9b
Cyren	W32/Ransom.IBHA-0488
Symantec	Downloader
ESET-NOD32	a variant of Win32/Filecoder.STOP.A
APEX	Malicious
Avast	Win32:RansomX-gen [Ransom]
Kaspersky	HEUR:Trojan-Ransom.Win32.Stop.gen
BitDefender	DeepScan:Generic.Ransom.Stop.01022F30
NANO-Antivirus	Trojan.Win32.Encoder.fpscko
MicroWorld-eScan	DeepScan:Generic.Ransom.Stop.01022F30
Tencent	Malware.Win32.Gencirc.10b9b088
Ad-Aware	DeepScan:Generic.Ransom.Stop.01022F30
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34790.xuX@aKvql0hi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.Win32.STOP.DB
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
FireEye	Generic.mg.f933dd4cd0f9b724
Emsisoft	DeepScan:Generic.Ransom.Stop.01022F30 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Stop.dz
Webroot	W32.EMOTET.TIABOFGR
Avira	ADWARE/ConvertAd.Gen7
eGambit	Unsafe.AI_Score_96%
Antiy-AVL	Trojan/Generic.ASMalwS.2BB2316
Microsoft	Ransom:Win32/StopCrypt.MAK!MTB
GData	DeepScan:Generic.Ransom.Stop.01022F30
AhnLab-V3	Trojan/Win32.RansomCrypt.R330916
McAfee	Ransomware-GPC!F933DD4CD0F9
MAX	malware (ai score=80)
VBA32	Trojan.Encoder
Malwarebytes	Ransom.Stop
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom.Win32.STOP.DB
Rising	Trojan.Generic@ML.100 (RDML:p1NMWd6DrDlday48xLnU/w)
Yandex	Trojan.Agent!6UfKNgsvioA
Ikarus	Trojan-Ransom.Stop
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Promorad.A!tr.ransom
AVG	Win32:RansomX-gen [Ransom]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Stop.HwoCsDsA