02c6a36c893f52fd57de1b0b53a2fcd0569d4a64a96578382efa6c6f9dd28513

Classification: Malicious

02c6a36c893f52fd57de1b0b53a2fcd0569d4a64a96578382efa6c6f9dd28513 is a trojan (application/x-dosexec, 249.5 KB). Linked to Hellokitty malware.

Detection summary

  • 78 antivirus detections (84% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: HELLOKITTY (S0617)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-11-06 20:00:03 2023-11-06 20:00:03
HelloKitty MalwareBazaar Abuse.ch 2021-12-24 18:30:55 2021-12-24 18:30:55 malicious-activity S0617 HELLOKITTY
Generic.Malware MalwareBazaar Abuse.ch 2021-12-24 18:30:55 2021-12-24 18:30:55 malicious-activity

Sample information

Filenames
file, 02c6a36c893f52fd57de1b0b53a2fcd0569d4a64a96578382efa6c6f9dd28513.bin
File type
application/x-dosexec
Size
255504 bytes
MD5
14f5905f9c03471d161d8d1c49e79149
SHA-1
ba2a42aeccda7e06bf2ac8f6bc7d46b93ddedd2d
SHA-256
02c6a36c893f52fd57de1b0b53a2fcd0569d4a64a96578382efa6c6f9dd28513
First indexed
2021-12-24 19:15:04
Last updated
2026-08-02 10:25:33

Antivirus detections

EngineDetection
LionicTrojan.Win32.Hellokit.j!c
tehtrisGeneric.Malware
DrWebTrojan.Encoder.33886
ClamAVWin.Ransomware.Zusy-9950758-0
CAT-QuickHealRansom.PFiveHands.S20412053
ALYacTrojan.Ransom.DEATHRansom
Cylanceunsafe
VIPREGen:Variant.Zusy.375932
SangforTrojan.Win32.Save.a
K7AntiVirusRiskware ( 0040eff71 )
AlibabaRansom:Win32/FileCryptor.42f544ad
K7GWRiskware ( 0040eff71 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitTrojan.Zusy.D5BC7C
CyrenW32/Filecoder.BC.gen!Eldorado
SymantecTrojan Horse
ElasticWindows.Ransomware.Hellokitty
ESET-NOD32a variant of Win32/Filecoder.DeathRansom.F
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Ransom.Win32.Hellokit.gen
BitDefenderGen:Variant.Zusy.375932
NANO-AntivirusTrojan.Win32.Redcap.itrfgt
MicroWorld-eScanGen:Variant.Zusy.375932
TencentMalware.Win32.Gencirc.10bde916
SophosTroj/FiveHand-A
F-SecureHeuristic.HEUR/AGEN.1319580
ZillyaTrojan.Filecoder.Win32.18232
TrendMicroTrojan.Win32.SERVMAN.B
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.14f5905f9c03471d
EmsisoftGen:Variant.Zusy.375932 (B)
IkarusTrojan-Ransom.DeathRansom
JiangminTrojan.Multi.um
AviraHEUR/AGEN.1319580
Antiy-AVLTrojan[Ransom]/Win32.DeathRansom
GridinsoftRansom.Win32.DeathRansom.oa!s1
XcitiumMalware@#3nc0fnpdbqosn
MicrosoftRansom:Win32/FileCryptor.PAC!MTB
ZoneAlarmHEUR:Trojan-Ransom.Win32.Hellokit.gen
GDataGen:Variant.Zusy.375932
GoogleDetected
AhnLab-V3Malware/Win.Trojan.R480153
McAfeeRansom-HeloKity!14F5905F9C03
MAXmalware (ai score=84)
DeepInstinctMALICIOUS
VBA32Trojan.Tiggre
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/Genetic.gen
TrendMicro-HouseCallTrojan.Win32.SERVMAN.B
RisingTrojan.Zpevdo!8.F912 (TFE:5:e5HpRwSHilJ)
YandexTrojan.Filecoder!m/qb9S5q1wk
SentinelOneStatic AI - Suspicious PE
MaxSecureTrojan.Malware.118212625.susgen
FortinetW32/DeathRansom.F!tr.ransom
AVGWin32:RansomX-gen [Ransom]
AvastWin32:RansomX-gen [Ransom]
BkavW32.AIDetect.malware1
McAfeeGenericRXAA-AA!14F5905F9C03
CylanceUnsafe
AlibabaRansom:Win32/FileCryptor.7feecde6
CrowdStrikewin/malicious_confidence_90% (W)
SymantecML.Attribute.HighConfidence
AvastWin32:TrojanX-gen [Trj]
Ad-AwareGen:Variant.Zusy.375932
SophosML/PE-A + Troj/FiveHand-A
VIPRETrojan.Win32.Generic!BT
eGambitUnsafe.AI_Score_99%
AhnLab-V3Malware/Win32.Trojan.C4370403
BitDefenderThetaGen:NN.ZexaF.34690.puZ@a4nvcLhi
ALYacGen:Variant.Zusy.375932
MalwarebytesMalware.AI.485024333
RisingTrojan.Zpevdo!8.F912 (RDMK:cmRtazqrbln9JRxt0LRpwxsHdrSZ)
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.eccda7
PandaTrj/CI.A

Process list

NameCommand line
file.exe