Ransom • Trojan

UDS:Trojan-Ransom.Win32.Hive malicious file

The UDS:Trojan-Ransom.Win32.Hive is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What UDS:Trojan-Ransom.Win32.Hive virus can do?

Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine UDS:Trojan-Ransom.Win32.Hive?


File Info:
name: 61209B451CA23725CEFF.mlw
path: /opt/CAPEv2/storage/binaries/c22891f1870b87eac1a0605c7934435ded6ff6df3cacf48a38ea9b30ae26fba3
crc32: 87D8333C
md5: 61209b451ca23725ceff8b2f7bc87a51
sha1: da25f23662ea3e7e47aa343ad4d161d8d008269e
sha256: c22891f1870b87eac1a0605c7934435ded6ff6df3cacf48a38ea9b30ae26fba3
sha512: 5fedd6dccad729970544f9c359d3b80b54cf04672dbbd724605c9b6683bbdf46e00eb6445ae8758cd3bcf64237b5564bb2f9de2b5c70af59bf4a6772325680be
ssdeep: 49152:/CQtsHMWrb/TvvO90dL3BmAFd4A64nsfJIYfun7j4QCoPzDxgLANPEuMWmItK3yX:/CIOYfun7j4WRMuMb
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1A6C51817B8F1A6E4C8A583704C5151E8EA30740D1368B3FB57A453B52BB2BE46FB7B90
sha3_384: a59fb41959bf0bb65dc504ab0109608e8ae2e474e1676397fe40a58f75adbfc24b09080b20406b2b75473308fdca745d
ep_bytes: e97bc3ffffcccccccccccccccccccccc
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

UDS:Trojan-Ransom.Win32.Hive also known as:

Lionic	Trojan.Win32.Cobalt.trRF
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
McAfee	Artemis!61209B451CA2
Sangfor	Trojan.Win32.Sabsik.FL
BitDefender	Gen:Variant.Razy.919999
APEX	Malicious
Kaspersky	UDS:Trojan-Ransom.Win32.Hive
MicroWorld-eScan	Gen:Variant.Razy.919999
Ad-Aware	Gen:Variant.Razy.919999
FireEye	Gen:Variant.Razy.919999
Emsisoft	Gen:Variant.Razy.919999 (B)
Ikarus	Trojan-Ransom.FileCrypter
GData	Gen:Variant.Razy.919999
MAX	malware (ai score=85)
Gridinsoft	Ransom.Win64.Sabsik.sa
Arcabit	Trojan.Razy.DE09BF
Microsoft	Program:Win32/Uwamson.A!ml
ALYac	Gen:Variant.Razy.919999
TrendMicro-HouseCall	TROJ_GEN.R002H09LC21
MaxSecure	Trojan.Malware.300983.susgen

How to remove UDS:Trojan-Ransom.Win32.Hive?

UDS:Trojan-Ransom.Win32.Hive removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X