Trojan-Ransom.Win32.Cryptor.fef malicious file

The Trojan-Ransom.Win32.Cryptor.fef is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Cryptor.fef virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Queries information on disks, possibly for anti-virtualization

How to determine Trojan-Ransom.Win32.Cryptor.fef?

File Info:
name: DB69E196FA43106CF9B0.mlw
path: /opt/CAPEv2/storage/binaries/578920d91894cea76656c08da43232bb4c76cbbbc762da179245218861268453
crc32: 06C1CA2B
md5: db69e196fa43106cf9b07b753e5207bf
sha1: b68f5367f79cadaded31ad514c4211c50173cbaa
sha256: 578920d91894cea76656c08da43232bb4c76cbbbc762da179245218861268453
sha512: 733c6709e0fae2f51993f86d07ced62de8e60089f45a8a17b4b5f63e455ae8054d4dac95098b4ec20a39c4ba503577190a2be4f2c0f656e5b49c4bfb0b65f4ab
ssdeep: 1536:5u8zwBHegF7m/IlqGgtHaleBXmRnQ+zhwIA9R:z7FGgtHaYeQ8WIwR
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1164301E4AC30BAB3D98E4B767F4A2D1BC37E613841BDD76948B92446B4D71C33561213
sha3_384: 392823edb1bc3f2fa95d0c260e6dccf62b96346e41d15b6614ee35b7bd088327b122644664f7eeb58e32aa963c6c7a35
ep_bytes: 6a00e889ffffff33c0c2040000000000
timestamp: 2021-09-04 18:00:27

Version Info:
0: [No Data]

Trojan-Ransom.Win32.Cryptor.fef also known as:

How to remove Trojan-Ransom.Win32.Cryptor.fef?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.