Trojan.Ransom.Loki.EWT information

The Trojan.Ransom.Loki.EWT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Ransom.Loki.EWT virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Tswana
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the RedLine malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan.Ransom.Loki.EWT?

File Info:
name: E9CB900E57154D6469DA.mlw
path: /opt/CAPEv2/storage/binaries/583b0791a0ba67d9dd1c0f542d8224a8293e767b8fb4c4308a0797d8a01d6989
crc32: 464CBA52
md5: e9cb900e57154d6469dae21c82a1753b
sha1: 6abf731b90c11ffbd3406aa6b89261cc9596fefd
sha256: 583b0791a0ba67d9dd1c0f542d8224a8293e767b8fb4c4308a0797d8a01d6989
sha512: 68074b342f0bc0ceb43a37269335c3edca82fc5f803f0cb59b2afcdf9477ad83951cea441717eb8a89977e171b7488e1d0d4603c90b8962d83111a37e8dc70d2
ssdeep: 6144:njpyL/e9qd1R8l41vGQFbkyuaWUqdMnEx5FErfj1kz+NLjkUhh:nEre9qdj8ehFb7u1M4Erfj6iNs2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T151840121B792C0F3C19619308464EBB09BFFA4322574B54B7F590BAE5F703C15AAE35A
sha3_384: 9824fa5fd47c45283d1df778116021e5a7bcc2e0a391527e6efb0036713ee2cfe00f4dd5465bf37a8e2eb408e30e32d4
ep_bytes: e8744e0000e979feffff8bff51c70194
timestamp: 2021-08-01 06:48:57

Version Info:
FileVersions: 68.78.22.74
InternationalName: povgwaoci.iwe
Copyright: Copyright (C) 2022, somoklos
ProjectVersion: 19.7.84.84

Trojan.Ransom.Loki.EWT also known as:

How to remove Trojan.Ransom.Loki.EWT?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.