Ransom Trojan

What is “Trojan.RansomKD.12615008”?

Malware Removal

The Trojan.RansomKD.12615008 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.RansomKD.12615008 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.RansomKD.12615008?


File Info:

crc32: 50E79ECA
md5: a9298b07bb641e6d48c1026ecef034dc
name: A9298B07BB641E6D48C1026ECEF034DC.mlw
sha1: 02852057275dac4a88e6f5e2d187d4ce8d95f2ff
sha256: 5947a70ef3bc76fec862e57b09bc061de5ce1584743623c3ea3a93100aaf7e68
sha512: 47077eff622ea855b85b6df528cadcd2f4df598f6e5d62d403c3827d8d1ca2a8e4ca681f3db1f425931fb0fb1443335bf7126c6d56cd4298cf70585468670b80
ssdeep: 6144:npkXchgdqKSs3q/HjO+6jP8a6vPoZlrt2ybqKbuALj58MwN3zy6Y1:61dqKSsojO+6jP8art24TuOYNDy6c
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Trojan.RansomKD.12615008 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 00501e561 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealRansom.Cerber.B
ALYacTrojan.RansomKD.12615008
CylanceUnsafe
SangforTrojan.Win32.Generic.8
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 00501e561 )
Cybereasonmalicious.7bb641
SymantecRansom.Cerber
ESET-NOD32NSIS/Injector.OF
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Dropper.Cerber-7685754-0
KasperskyTrojan.Win32.Inject.wnac
BitDefenderTrojan.RansomKD.12615008
NANO-AntivirusTrojan.Nsis.Zerber.ejqkng
MicroWorld-eScanTrojan.RansomKD.12615008
TencentWin32.Trojan.Raas.Auto
Ad-AwareTrojan.RansomKD.12615008
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.ObfusRansom.dc
FireEyeGeneric.mg.a9298b07bb641e6d
EmsisoftTrojan.RansomKD.12615008 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Dropper.Gen
MicrosoftRansom:Win32/Cerber
GDataTrojan.RansomKD.12615008
TACHYONRansom/W32.Cerber.273236
AhnLab-V3Trojan/Win32.Cerber.R191818
McAfeeArtemis!A9298B07BB64
MAXmalware (ai score=99)
MalwarebytesMalware.AI.46563548
PandaTrj/CI.A
YandexTrojan.Inject!rsr5m9u65N0
FortinetW32/Injector.MZ!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Inject.HyoD8scA

How to remove Trojan.RansomKD.12615008?

Trojan.RansomKD.12615008 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment