Ransom Trojan

Trojan-Ransom.Win32.Foreign.obbj (file analysis)

Malware Removal

The Trojan-Ransom.Win32.Foreign.obbj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Foreign.obbj virus can do?

  • Unconventionial language used in binary resources: Thai
  • The binary likely contains encrypted or compressed data.
  • The executable is likely packed with VMProtect
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Ransom.Win32.Foreign.obbj?


File Info:

crc32: 9FF6A589
md5: 61beedd9bcbd19704ba99d3d0dea309d
name: 61BEEDD9BCBD19704BA99D3D0DEA309D.mlw
sha1: 303e1559c36371e37f2b008d451abb5d04984823
sha256: b72fef90431eaa27d497a6ee1b5d727edbd07694ae067b19e4eca159894d8eb1
sha512: 075d2b235cd31ebb8ee043448183d4433fa5c05180b916ae391c175afb2e94145adb48b5de39ece502ad9b54536f5cbb776aab9bbccf2ba849b323c4c177a475
ssdeep: 24576:0UioV9fRza11GNfuddsqXfM5emlWCTvASYReEvSWWl2Z2:Xiw9Rz/cddx0eAJAreX7Y
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Foreign.obbj also known as:

BkavW32.AIDetect.malware2
CynetMalicious (score: 100)
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.202065
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaRansom:Win32/Foreign.5349c983
Cybereasonmalicious.9c3637
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Foreign.obbj
TencentWin32.Trojan.Foreign.Wogk
SophosMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.61beedd9bcbd1970
SentinelOneStatic AI – Malicious PE
AviraTR/Foreign.miqkq
MicrosoftBackdoor:Win32/Bladabindi!ml
McAfeeArtemis!61BEEDD9BCBD
PandaTrj/CI.A
RisingTrojan.Generic@ML.90 (RDML:GbU/djLgBIF1h6LuZbZ5EQ)
YandexTrojan.Foreign!pzNHKoHWxSA
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Foreign.OBBJ!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Foreign.HgIASRMA

How to remove Trojan-Ransom.Win32.Foreign.obbj?

Trojan-Ransom.Win32.Foreign.obbj removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment