Ransom Trojan

Trojan.Ransom.CerberKD.12614037 (file analysis)

Malware Removal

The Trojan.Ransom.CerberKD.12614037 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Ransom.CerberKD.12614037 virus can do?

  • Executable code extraction
  • Compression (or decompression)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Creates an excessive number of UDP connection attempts to external IP addresses
  • Exhibits behavior characteristic of Cerber ransomware
  • Exhibits possible ransomware file modification behavior
  • Creates a known Cerber ransomware decryption instruction / key file.
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Trojan.Ransom.CerberKD.12614037?


File Info:

crc32: 0D81F1F1
md5: a568b68ff82200f4823b592b813439c9
name: A568B68FF82200F4823B592B813439C9.mlw
sha1: 08b2afc11042dc2c0c700010dc596571ea70ed00
sha256: d6932e6549c37f3faaff8ed68fc4d88d971a8398e49d88c29179879c62459c78
sha512: f9eae94ec12166c4dfed34355b38fd965db3273843090325480a7f71ff92cca31a471fc486ef55053d0e1308e771f155c42491f325bdfc498b17324faaedaed1
ssdeep: 6144:2UjRwjVv/4f+ci//rhTALaZyFbEqQMP+6WkGwJoVVFw:2qKVvwfjO/r2EyFbvxm6n6zw
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Trojan.Ransom.CerberKD.12614037 also known as:

K7AntiVirusTrojan ( 004ff7861 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.4691
CynetMalicious (score: 100)
CAT-QuickHealRansom.Cerber.B
ALYacTrojan.Ransom.CerberKD.12614037
CylanceUnsafe
ZillyaDropper.Agent.Win32.380853
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 004ff7861 )
Cybereasonmalicious.ff8220
CyrenHTML/Agent.CZ
SymantecRansom.Cerber
ESET-NOD32Win32/Filecoder.Cerber.C
ZonerTrojan.Win32.52141
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Ransomware.Cerber-6995345-0
KasperskyTrojan-Ransom.Win32.Zerber.ffgm
BitDefenderTrojan.Ransom.CerberKD.12614037
NANO-AntivirusTrojan.Nsis.AD.ejjako
MicroWorld-eScanTrojan.Ransom.CerberKD.12614037
TencentWin32.Trojan.Inject.Auto
Ad-AwareTrojan.Ransom.CerberKD.12614037
VIPRETrojan.Win32.Generic!BT
TrendMicroMal_Cerber-10
FireEyeGeneric.mg.a568b68ff82200f4
EmsisoftTrojan.Ransom.CerberKD.12614037 (B)
SentinelOneStatic AI – Suspicious PE
AviraTR/Dropper.Gen
MicrosoftRansom:Win32/Cerber
SUPERAntiSpywareRansom.Cerber/Variant
GDataTrojan.Ransom.CerberKD.12614037
TACHYONRansom/W32.Cerber.269078
AhnLab-V3Trojan/Win32.Cerber.R191708
McAfeeArtemis!A568B68FF822
MAXmalware (ai score=100)
VBA32Trojan-Ransom.Zerber
MalwarebytesRansom.Cerber.Generic
PandaTrj/CI.A
TrendMicro-HouseCallMal_Cerber-10
RisingTrojan.Win32.Cerber.s (CLASSIC)
FortinetW32/Injector.MF!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Trojan.Ransom.CerberKD.12614037?

Trojan.Ransom.CerberKD.12614037 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment