0cbb472b555d4cab454948ba900675db48b120afaedf246a14d87d970b233a43
Classification: Malicious
0cbb472b555d4cab454948ba900675db48b120afaedf246a14d87d970b233a43 is a ransomware (application/x-dosexec). Detected by 65 antivirus engines.
Detection summary
- 65 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: WIPER (S0041)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ransomware | VM-Ray | 2023-03-11 19:21:01 | 2023-03-11 19:21:01 | ||
| Wiper | VM-Ray | 2023-03-11 19:21:01 | 2023-03-11 19:21:01 | S0041 Wiper | |
| Dharma | MalwareBazaar Abuse.ch | 2023-03-11 16:45:53 | 2023-03-11 16:45:53 |
Sample information
- Filenames
- 0cbb472b555d4cab454948ba900675db48b120afaedf246a14d87d970b233a43.exe, payload.bin
- File type
- application/x-dosexec
- MD5
a0dd1dfbac4b2aaed94b2065a9c9f30c- SHA-1
b797000407eb333dc80777dd088204179b62fb5c- SHA-256
0cbb472b555d4cab454948ba900675db48b120afaedf246a14d87d970b233a43- First indexed
- 2023-03-11 16:45:53
- Last updated
- 2026-09-22 18:05:38
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Ransom.Crysis |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Ransom] |
| AhnLab-V3 | Ransomware/Win.Crysis.R213980 |
| Alibaba | Ransom:Win32/Crysis.ali1020005 |
| Antiy-AVL | Trojan[Ransom]/Win32.Crysis |
| Arcabit | Trojan.Ransom.Crysis.E |
| Avast | Win32:MalwareX-gen [Ransom] |
| Avira | TR/Dropper.Gen |
| BitDefender | Trojan.Ransom.Crysis.E |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Ransom.Crysis.A3 |
| CTX | exe.ransomware.crysis |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.3953 |
| ESET-NOD32 | a variant of Win32/Filecoder.Crysis.P |
| Elastic | Windows.Ransomware.Dharma |
| Emsisoft | Trojan.Ransom.Crysis.E (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| Fortinet | W32/Crysis.L!tr.ransom |
| GData | Win32.Trojan-Ransom.VirusEncoder.A |
| Detected | |
| Gridinsoft | Ransom.Win32.STOP.dd!se42548 |
| Ikarus | Trojan-Ransom.Crysis |
| Jiangmin | Trojan.Crypren.ic |
| K7AntiVirus | Trojan ( 00519f781 ) |
| K7GW | Trojan ( 00519f781 ) |
| Kaspersky | Trojan-Ransom.Win32.Crusis.to |
| Kingsoft | malware.kb.a.1000 |
| Lionic | Trojan.Win32.Crusis.tqMs |
| Malwarebytes | Generic.Ransom.FileCryptor.DDS |
| MaxSecure | Trojan-Ransom.Win32.Crusis.To |
| McAfeeD | Real Protect-LS!A0DD1DFBAC4B |
| MicroWorld-eScan | Trojan.Ransom.Crysis.E |
| Microsoft | Ransom:Win32/Wadhrama!pz |
| NANO-Antivirus | Trojan.Win32.Filecoder.emdnxn |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Crysis!1.A6AA (CLASSIC) |
| SUPERAntiSpyware | Ransom.Crysis/Variant |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Generic.nc |
| Sophos | Troj/Criakl-G |
| Symantec | Ransom.Crysis |
| Tencent | Trojan-Ransom.Win32.Crysis.a |
| Trapmine | malicious.high.ml.score |
| TrellixENS | Ransom-Dharma!A0DD1DFBAC4B |
| TrendMicro | Ransom.Win32.CRYSIS.SM |
| TrendMicro-HouseCall | Ransom.Win32.CRYSIS.SM |
| VBA32 | TrojanRansom.Crusis |
| VIPRE | Trojan.Ransom.Crysis.E |
| Varist | W32/Trojan.ILHO-9216 |
| ViRobot | Trojan.Win32.Ransom.94720.F |
| VirIT | Trojan.Win32.Genus.OGJ |
| Webroot | W32.Ransom.Gen |
| Xcitium | TrojWare.Win32.Crysis.D@6sd9xy |
| Yandex | Trojan.GenAsa!PU4zXkABPRE |
| Zillya | Trojan.Crusis.Win32.2093 |
| ZoneAlarm | Troj/Criakl-G |
| alibabacloud | RansomWare |
| huorong | Ransom/Crysis.a |