Trojan-Ransom.Win32.SageCrypt.asr

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

: Solved! 5 Stars (5 / 5)

Trojan-Ransom.Win32.SageCrypt.asr also known as Ransom_Milicry.R023C0CCN17, Ransom.Cry, Trojan.GenericKD.4595309.

Malware Analysis of Trojan-Ransom.Win32.SageCrypt.asr – WDBVQ5VJ.EXE

Created files:

%APPDATA%\MICROSOFT\SPEECH\FILES\USERLEXICONS\SP_FD36C5FB2CA14DDE905F1D1CE579247C.DAT
%APPDATA%\F1.HTA
%APPDATA%\WDBVQ5VJ.EXE
%APPDATA%\XJ0IRWTW.TMP
%PROFILE%\DESKTOP\WARRIOR\!HELP_SOS.HTA

Detected by UnHackMe:

WDBVQ5VJ.EXE
DEFAULT LOCATION: %APPDATA%\WDBVQ5VJ.EXE

Dropper hash(md5): 12c6a555b5ddbfb1106159320c06c390

Share This:

Written by 

Malware Hunter.

UnHackMe removes malware invisible for your antivirus!

Free Download

1
UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera