sub_0a3517d8d382.bin
Classification: Malicious
sub_0a3517d8d382.bin is a malicious file sample. Linked to Cuba malware. Reported by 1 threat source, last seen 2026-05-24. Detected by 55 antivirus engines.
Detection summary
- 55 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CUBA (S0625)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Cuba | Triage | 2026-05-24 01:50:13 | 2026-05-24 01:50:13 | malicious-activity | S0625 Cuba |
Tags
cuba discovery ransomwareSample information
- Filenames
- sub_0a3517d8d382.bin
- SHA-256
0a3517d8d382a0a45334009f71e48114d395a22483b01f171f2c3d4a9cfdbfbf- First indexed
- 2026-05-24 01:50:13
- Last updated
- 2026-05-24 01:50:13
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Ransom.Filecoder |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Ransom] |
| AhnLab-V3 | Trojan/Win.Generic.C5012985 |
| Alibaba | Ransom:Win32/generic.ali2000010 |
| Antiy-AVL | Trojan/Win32.Agent |
| Arcabit | Trojan.Trojan.Ransomware.D965 |
| Avast | Win32:MalwareX-gen [Ransom] |
| Avira | TR/AD.ZudochkaRansom.zxehc |
| BitDefender | Gen:Variant.Trojan.Ransomware.2405 |
| CTX | exe.trojan.cuba |
| ClamAV | Win.Packed.Generickdz-9948392-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.StartPage1.61192 |
| ESET-NOD32 | Win32/Kryptik.HOSU trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Trojan.Ransomware.2405 (B) |
| F-Secure | Trojan.TR/AD.ZudochkaRansom.zxehc |
| Fortinet | W32/GenKryptik.FMWI!tr |
| GData | Gen:Variant.Trojan.Ransomware.2405 |
| Detected | |
| Ikarus | Trojan.SuspectCRC |
| K7AntiVirus | Ransomware ( 005cef6c1 ) |
| K7GW | Ransomware ( 005cef6c1 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Crypmod.gen |
| Lionic | Trojan.Win32.Cuba.j!c |
| Malwarebytes | Malware.AI.1526211418 |
| MaxSecure | Trojan.Malware.73839158.susgen |
| McAfeeD | ti!0A3517D8D382 |
| MicroWorld-eScan | Gen:Variant.Trojan.Ransomware.2405 |
| Microsoft | Ransom:Win32/Cuba.RMA!MTB |
| NANO-Antivirus | Trojan.Win32.Crypmod.jpluat |
| Paloalto | generic.ml |
| Panda | Trj/RansomCrypt.N |
| Rising | Ransom.Crypmodng!8.10C86 (TFE:5:MtMRcDZR9yE) |
| Sangfor | Ransom.Win32.Kryptik.Vbyt |
| Skyhigh | BehavesLike.Win32.ObfuscatedPoly.th |
| Sophos | Troj/Delf-HOC |
| Symantec | Ransom.Cuba |
| Tencent | Malware.Win32.Gencirc.10bdc01e |
| TrellixENS | Artemis!BCD57DA0C23E |
| TrendMicro | Ransom.Win32.BACUCRYPT.THEBOBB |
| TrendMicro-HouseCall | Ransom.Win32.BACUCRYPT.THEBOBB |
| VBA32 | TScope.Trojan.Delf |
| VIPRE | Gen:Variant.Trojan.Ransomware.2405 |
| Varist | W32/Risk.LYFZ-1724 |
| ViRobot | Trojan.Win32.Z.Zusy.1629696 |
| VirIT | Trojan.Win32.GenusT.DYBR |
| Yandex | Trojan.Kryptik!RqF5Ol5AewM |
| Zillya | Trojan.GenKryptik.Win32.134103 |
| ZoneAlarm | Troj/Delf-HOC |
| alibabacloud | Ransomware:Win/Cuba.RZZ2XJC |