Ransom Trojan

Trojan-Ransom.Win32.Crypmod.aasl (file analysis)

Malware Removal

The Trojan-Ransom.Win32.Crypmod.aasl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Crypmod.aasl virus can do?

  • The binary likely contains encrypted or compressed data.
  • Exhibits possible ransomware file modification behavior
  • Writes a potential ransom message to disk
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Crypmod.aasl?


File Info:

crc32: 9DC1E5DB
md5: bee19f1c5a60994a4b36582b312611f1
name: BEE19F1C5A60994A4B36582B312611F1.mlw
sha1: 8ca9716f73fcaf05ba5029667ffd97db2e573492
sha256: 7b6ee850492a42006c3453eae6150dec1a50c7f2ecd5cee805410a87b7796195
sha512: c0a23e7a723db947869a8a9486f0387eca1fd4f6028e07840a96a949cf1d2caedd7f25d45b1d9e3d36523e4c22e929b05f8882fc8e58b7a4fc4d50c35006b2d2
ssdeep: 3072:3+8+j2u8X07qC+fO+Akcvxq+kZt2OLu4BkskBH3uIv/20xNY6dh90JnHiy:K2nCEO+eEVqeLkBNv9DY6dhcnHiy
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Crypmod.aasl also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053305e1 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.23992
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Chapak.ZZ6
ALYacTrojan.Ransom.GlobeImposter
CylanceUnsafe
ZillyaTrojan.Crypmod.Win32.476
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaRansom:Win32/Crypmod.b020abfd
K7GWTrojan ( 0053305e1 )
Cybereasonmalicious.c5a609
CyrenW32/Ransom.IU.gen!Eldorado
ESET-NOD32a variant of Win32/Kryptik.GAWB
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.Crypmod.aasl
BitDefenderTrojan.BRMon.Gen.4
NANO-AntivirusTrojan.Win32.Encoder.ferppb
ViRobotTrojan.Win32.GlobeImposter.195584
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
MicroWorld-eScanTrojan.BRMon.Gen.4
TencentMalware.Win32.Gencirc.11492a19
Ad-AwareTrojan.BRMon.Gen.4
SophosML/PE-A + Mal/GandCrab-D
ComodoTrojWare.Win32.Crypt.CE@7j06ca
BitDefenderThetaGen:NN.ZexaF.34608.luW@aqpSHnb
TrendMicroRansom_HPGANDCRAB.SMONT
McAfee-GW-EditionBehavesLike.Win32.Trojan.ch
FireEyeGeneric.mg.bee19f1c5a60994a
EmsisoftTrojan.BRMon.Gen.4 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1106544
eGambitUnsafe.AI_Score_59%
MicrosoftRansom:Win32/Gandcrab.SF!MTB
ArcabitTrojan.BRMon.Gen.4
AegisLabTrojan.Win32.Crypmod.4!c
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.BRMon.Gen.4
AhnLab-V3Win-Trojan/MalPe26.Suspicious.X2012
Acronissuspicious
McAfeeGenericR-NGK!BEE19F1C5A60
MAXmalware (ai score=82)
VBA32Trojan-Ransom.Blocker
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_HPGANDCRAB.SMONT
RisingMalware.Obscure/Heur!1.A89E (CLOUD)
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.CNAR!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360HEUR/QVM10.2.57D3.Malware.Gen

How to remove Trojan-Ransom.Win32.Crypmod.aasl?

Trojan-Ransom.Win32.Crypmod.aasl removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment