The Ransom:Win32/StopCrypt.SAJ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.
What Ransom:Win32/StopCrypt.SAJ!MTB virus can do?
File Info:
name: 4841ED91528F3DA24D29.mlwpath: /opt/CAPEv2/storage/binaries/ece00f36b59c45049bd610f19c7e89e3ebac7858e749983ce841f5dd8f5abd96crc32: C1931D53md5: 4841ed91528f3da24d29409603edb357sha1: b7eea4a500158697c7f403dc80d46aa8cdfa56d5sha256: ece00f36b59c45049bd610f19c7e89e3ebac7858e749983ce841f5dd8f5abd96sha512: 50d081765df631aeeb1a5b725c15c2c4cf18a45a349b98a07f2da9750d966b0d82bea2be5a05f79b627d5cec8be7bc1fc36e30dc5905063bf9c52fbd9a280858ssdeep: 3072:Kjf+C31gE87VbIHhG8mrcw3mv7vcCd1wi/I3jafAvJ3:QWCKE879IHbv7vcCd1wF3OStype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T16F148E2372E0A860E5725E31DD29D6E46EAEFD534E386A9B2334EB1F0D701E1C532752sha3_384: 6b33039a2e263b5c6bc452ae930ec7e3c328b73970a2a20b0f3048db64dfb0dedfce9237cbfe2d4a118af12f875b56e1ep_bytes: e8b4530000e989feffff8bff558bec83timestamp: 2021-12-08 07:32:22Version Info:
CompanyName: PakistanFoodFileDescription: MorriconeFileVersion: 25.77.48.49InternalName: GorgerousOnce.exeLegalTrademarks1: consultatedProductName: HypsterWorldTranslation: 0x4047 0x0565
Bkav | W32.AIDetectMalware |
Lionic | Trojan.Win32.Generic.4!c |
Elastic | malicious (high confidence) |
Cynet | Malicious (score: 100) |
FireEye | Generic.mg.4841ed91528f3da2 |
ALYac | Gen:Variant.Zusy.451934 |
Cylance | unsafe |
VIPRE | Gen:Variant.Zusy.451934 |
Sangfor | Trojan.Win32.Save.a |
K7AntiVirus | Trojan ( 0059f7cb1 ) |
Alibaba | Backdoor:MSIL/Convagent.c166571c |
K7GW | Trojan ( 0059f7cb1 ) |
Cybereason | malicious.500158 |
Cyren | W32/Agent.FRF.gen!Eldorado |
Symantec | ML.Attribute.HighConfidence |
ESET-NOD32 | a variant of Win32/Kryptik.HSXO |
APEX | Malicious |
Paloalto | generic.ml |
Kaspersky | HEUR:Backdoor.MSIL.Convagent.gen |
BitDefender | Gen:Variant.Zusy.451934 |
NANO-Antivirus | Trojan.Win32.Convagent.jvayom |
MicroWorld-eScan | Gen:Variant.Zusy.451934 |
Avast | Win32:DropperX-gen [Drp] |
Tencent | Trojan.Win32.Obfuscated.gen |
Emsisoft | Gen:Variant.Zusy.451934 (B) |
F-Secure | Heuristic.HEUR/AGEN.1310247 |
DrWeb | Trojan.DownLoader45.46826 |
Zillya | Backdoor.Convagent.Win32.2180 |
TrendMicro | Ransom_StopCrypt.R03BC0DC523 |
McAfee-GW-Edition | BehavesLike.Win32.Lockbit.ch |
Trapmine | malicious.high.ml.score |
Sophos | Troj/Krypt-VE |
Ikarus | Trojan.Win32.Crypt |
GData | Gen:Variant.Zusy.451934 |
Avira | HEUR/AGEN.1310247 |
Antiy-AVL | Trojan/Win32.Sabsik |
Arcabit | Trojan.Zusy.D6E55E |
ZoneAlarm | HEUR:Backdoor.MSIL.Convagent.gen |
Microsoft | Ransom:Win32/StopCrypt.SAJ!MTB |
Detected | |
AhnLab-V3 | Trojan/Win.Generic.R560826 |
McAfee | Artemis!4841ED91528F |
MAX | malware (ai score=83) |
VBA32 | BScope.Trojan.CoinMiner |
Malwarebytes | Trojan.MalPack.GS |
Panda | Trj/Genetic.gen |
TrendMicro-HouseCall | Ransom_StopCrypt.R03BC0DC523 |
Rising | Stealer.Agent!8.C2 (TFE:5:6eHKPETpV5B) |
Yandex | Trojan.Kryptik!PJyQayVRziU |
SentinelOne | Static AI – Malicious PE |
MaxSecure | Trojan.Malware.300983.susgen |
Fortinet | W32/Kryptik.HSXO!tr |
AVG | Win32:DropperX-gen [Drp] |
DeepInstinct | MALICIOUS |
CrowdStrike | win/malicious_confidence_100% (W) |
The Win32/AutoRun.VB.AUW is considered dangerous by lots of security experts. When this infection is active,…
The Trojan:Win64/Metasploit!pz is considered dangerous by lots of security experts. When this infection is active,…
The Win32/Agent_AGen.BLW is considered dangerous by lots of security experts. When this infection is active,…
The Backdoor:MSIL/WebShell.GMF!MTB is considered dangerous by lots of security experts. When this infection is active,…
The Mikey.163204 is considered dangerous by lots of security experts. When this infection is active,…
The Johnnie.99287 is considered dangerous by lots of security experts. When this infection is active,…