0f0014669bc10a7d87472cafc05301c66516857607b920ddeb3039f4cb8f0a50.exe
Classification: Malicious
0f0014669bc10a7d87472cafc05301c66516857607b920ddeb3039f4cb8f0a50.exe is a malicious file sample. Linked to Pysa malware. Detected by 58 antivirus engines.
Detection summary
- 58 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: PYSA (S0583)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-06-17 12:45:05 | 2026-06-17 12:45:05 | malicious-activity | |
| Mespinoza | MalwareBazaar Abuse.ch | 2022-05-25 22:51:43 | 2022-05-25 22:51:43 | malicious-activity | S0583 Pysa |
Sample information
- Filenames
- 0f0014669bc10a7d87472cafc05301c66516857607b920ddeb3039f4cb8f0a50.exe, W71my1HtQm.exe
- File type
- application/x-dosexec
- MD5
339165f63aec8d7fd7798129d0fc68ad- SHA-1
07f594333ca9db110bbee37a9643988f4cc22933- SHA-256
0f0014669bc10a7d87472cafc05301c66516857607b920ddeb3039f4cb8f0a50- First indexed
- 2022-05-25 23:15:04
- Last updated
- 2026-07-31 11:21:45
Antivirus detections
| Engine | Detection |
|---|---|
| Lionic | Trojan.Win32.Zudochka.4!c |
| Elastic | Windows.Ransomware.Mespinoza |
| Cynet | Malicious (score: 99) |
| CAT-QuickHeal | Ransom.Mespinoza.R7 |
| McAfee | Ransom-Mespinoz!339165F63AEC |
| Malwarebytes | Ransom.Mespinoza |
| Sangfor | Trojan.Win32.Filecoder.NYO |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Alibaba | Ransom:Win32/generic.ali2000010 |
| K7GW | Trojan ( 0055b4ae1 ) |
| K7AntiVirus | Trojan ( 0055b4ae1 ) |
| VirIT | Trojan.Win32.Genus.CPB |
| Cyren | W32/Filecoder.BS.gen!Eldorado |
| Symantec | Downloader |
| ESET-NOD32 | a variant of Win32/Filecoder.NYO |
| APEX | Malicious |
| Paloalto | generic.ml |
| ClamAV | Win.Ransomware.Mespinoza-9819427-0 |
| Kaspersky | Trojan.Win32.Zudochka.ery |
| BitDefender | Generic.Ransom.Mespinoza.71C7985E |
| NANO-Antivirus | Trojan.Win32.Zudochka.hqdobx |
| ViRobot | Trojan.Win32.Z.Filecoder.511488 |
| MicroWorld-eScan | Generic.Ransom.Mespinoza.71C7985E |
| Avast | Win32:RansomX-gen [Ransom] |
| Rising | Ransom.Agent!1.C222 (CLASSIC) |
| Ad-Aware | Generic.Ransom.Mespinoza.71C7985E |
| Sophos | Mal/Generic-R + Troj/Pysa-A |
| Comodo | Malware@#2g01havw807jj |
| DrWeb | Trojan.Encoder.32290 |
| Zillya | Trojan.Filecoder.Win32.15475 |
| TrendMicro | Ransom.Win32.MESPINOZA.SMDA |
| McAfee-GW-Edition | Ransom-Mespinoz!339165F63AEC |
| FireEye | Generic.mg.339165f63aec8d7f |
| Emsisoft | Generic.Ransom.Mespinoza.71C7985E (B) |
| SentinelOne | Static AI - Suspicious PE |
| GData | Generic.Ransom.Mespinoza.71C7985E |
| Jiangmin | Trojan.Zudochka.iv |
| Avira | HEUR/AGEN.1213354 |
| MAX | malware (ai score=100) |
| Gridinsoft | Ransom.Win32.Generic.oa!s1 |
| Arcabit | Generic.Ransom.Mespinoza.71C7985E |
| ZoneAlarm | Trojan.Win32.Zudochka.ery |
| Microsoft | Ransom:Win32/Filecoder.PD!MTB |
| AhnLab-V3 | Ransomware/Win.Generic.R490082 |
| VBA32 | Trojan.Zudochka |
| ALYac | Trojan.Ransom.Mespinoza |
| TACHYON | Ransom/W32.Mespinoza.511488 |
| Cylance | Unsafe |
| TrendMicro-HouseCall | Ransom.Win32.MESPINOZA.SMDA |
| Tencent | Malware.Win32.Gencirc.11b2ecdb |
| Yandex | Trojan.GenAsa!qoUkCes1Sac |
| Ikarus | Trojan-Ransom.FileCrypter |
| MaxSecure | Trojan.Malware.300983.susgen |
| Fortinet | W32/Filecoder.NYO!tr.ransom |
| BitDefenderTheta | Gen:NN.ZexaF.34682.FCW@aWv7i8oi |
| AVG | Win32:RansomX-gen [Ransom] |
| Cybereason | malicious.63aec8 |
| Panda | Trj/GdSda.A |