Trojan

About “Trojan.Generic.20477748” infection

Malware Removal

The Trojan.Generic.20477748 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Generic.20477748 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • A named pipe was used for inter-process communication
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Attempts to delete volume shadow copies
  • Crashed cuckoomon during analysis. Report this error to the Github repo.
  • Modifies boot configuration settings
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself
  • Collects information to fingerprint the system
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

How to determine Trojan.Generic.20477748?


File Info:

crc32: 147DE5AF
md5: 8249d622ca710f459c5bc098272175af
name: 8249D622CA710F459C5BC098272175AF.mlw
sha1: 4ffdbff06538089ab6b05883ad9c83a52eefcfa7
sha256: 95f14f8497f128348b1bc6bea257f1b6ab025bb51c04b61d91820fab68720ad6
sha512: 62fb458f45e799e183093fc2620b347b667f672d8e76bef32e63663490562d0463f4619838dd9be351164c04b8d593d8167014a643a89bcf9f84e24ea82db97b
ssdeep: 6144:QdfbfQtkdzDhVdD21qymMSXlj71LMyPQmUxhupD/6GAP3tZ6EEO6K:bwQmM0lj71AyPQdP8GJv/5F6K
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Generic.20477748 also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Encoder.10180
ClamAVWin.Ransomware.Sagecrypt-6195604-0
McAfeeGenericRXBC-TQ!8249D622CA71
CylanceUnsafe
ZillyaTrojan.Filecoder.Win32.4267
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/SageCrypt.3dc3a6e5
K7GWTrojan ( 0056e92e1 )
K7AntiVirusTrojan ( 0056e92e1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Filecoder.NHQ
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
KasperskyTrojan-Ransom.Win32.SageCrypt.jw
BitDefenderTrojan.Generic.20477748
NANO-AntivirusTrojan.Win32.SageCrypt.elxxok
MicroWorld-eScanTrojan.Generic.20477748
TencentMalware.Win32.Gencirc.10bb803c
Ad-AwareTrojan.Generic.20477748
SophosMal/Generic-S
ComodoMalware@#3fl5gtjt0kuae
BitDefenderThetaGen:NN.ZexaF.34628.tuX@a0n85@hi
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_MILICRY.F117C2
McAfee-GW-EditionBehavesLike.Win32.Emotet.fh
FireEyeGeneric.mg.8249d622ca710f45
EmsisoftTrojan.Generic.20477748 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.SageCrypt.k
AviraHEUR/AGEN.1128643
MicrosoftRansom:Win32/Milicry.A
GDataTrojan.Generic.20477748
AhnLab-V3Trojan/Win32.SageCrypt.C1808930
VBA32BScope.Trojan.Yakes
MAXmalware (ai score=87)
MalwarebytesMalware.AI.2584866968
PandaTrj/CI.A
TrendMicro-HouseCallRansom_MILICRY.F117C2
RisingRansom.Milicry!8.A2F2 (CLOUD)
IkarusTrojan-Ransom.GandCrab
FortinetW32/Filecoder.NHQ!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.SageCryp.HgIASOkA

How to remove Trojan.Generic.20477748?

Trojan.Generic.20477748 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment