Win32:CVE-2018-8453-L [Expl] information

The Win32:CVE-2018-8453-L [Expl] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:CVE-2018-8453-L [Expl] virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
CAPE detected the REvil malware family

How to determine Win32:CVE-2018-8453-L [Expl]?


File Info:
name: 649C6218306F2A4C8D74.mlw
path: /opt/CAPEv2/storage/binaries/50e5f6bd438b3b8d7e18ac7e9fbff99a19cc6222a1bd4a5aca0152f3a342cee1
crc32: 755005D9
md5: 649c6218306f2a4c8d742c394ae9c860
sha1: 266e42bd51852509127bcbee40fc8edf40d13c2e
sha256: 50e5f6bd438b3b8d7e18ac7e9fbff99a19cc6222a1bd4a5aca0152f3a342cee1
sha512: 5ea0052310de7cb3655a71c4b5f95114b8982b3eab85beb0b22eb889910674a09df49eb7679def9cf0d37271481828bf6de6916c1821e625d454f3e0839f8bf4
ssdeep: 3072:ZVvpXmjmYdJ4S1RjnRdRkVGH7l87LWu9JAUUo7b0YhaP+xcDgD7T29m+8/4R6clf:ZD2jJD4kRBuG8Gi/0OtD79tKJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10AB43A2926984C61E0B3D939C9C60547E3E6396483949CE70EC3BA4C4F1BED9EEB3D51
sha3_384: 7aba1e7406374843eb4c686da6b986376520da660bb302e82878d56abfc5c8788c352607cf3c66579de5bc4997c3a856
ep_bytes: 6a00e8c5ffffff6a00e8f608000059c3
timestamp: 2020-05-08 15:47:59

Version Info:
0: [No Data]

Win32:CVE-2018-8453-L [Expl] also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Sodin.trMK
MicroWorld-eScan	Trojan.GenericKD.47511171
FireEye	Trojan.GenericKD.47511171
McAfee	GenericRXMD-MU!649C6218306F
Malwarebytes	Trojan.Nymaim.Generic
Zillya	Trojan.Filecoder.Win32.14505
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Exploit:Win32/CVE-2018-8453.4c43373b
K7GW	Trojan ( 0054f2831 )
K7AntiVirus	Trojan ( 0054f2831 )
Cyren	W32/Filecoder.CC.gen!Eldorado
Symantec	Downloader
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Ransomware.Sodinokibi-7013612-0
Kaspersky	VHO:Trojan-Ransom.Win32.Convagent.gen
BitDefender	Trojan.GenericKD.47511171
Avast	Win32:CVE-2018-8453-L [Expl]
Ad-Aware	Trojan.GenericKD.47511171
Emsisoft	Trojan.GenericKD.47511171 (B)
DrWeb	Trojan.Encoder.28004
TrendMicro	Ransom.Win32.SODINOKIBI.YXBK3Z
McAfee-GW-Edition	BehavesLike.Win32.Generic.hm
Sophos	Mal/Generic-R + Troj/Sodino-BU
Ikarus	Trojan-Ransom.Sodinokibi
GData	Trojan.GenericKD.47511171
eGambit	Unsafe.AI_Score_73%
MAX	malware (ai score=86)
Antiy-AVL	Trojan/Generic.ASMalwS.306D10C
Gridinsoft	Ransom.U.Sabsik.sa
Arcabit	Trojan.Generic.D2D4F683
ViRobot	Trojan.Win32.Ransom.118272.B
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_Ransom.R290570
Acronis	suspicious
ALYac	Trojan.GenericKD.47511171
TrendMicro-HouseCall	Ransom.Win32.SODINOKIBI.YXBK3Z
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:CVE-2018-8453-L [Expl]
Cybereason	malicious.d51852
Panda	Trj/CI.A

How to remove Win32:CVE-2018-8453-L [Expl]?

Win32:CVE-2018-8453-L [Expl] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X