eTeb5BGH.dll

Classification: Malicious

eTeb5BGH.dll is a ransomware (Windows executable, 161.0 KB). Flagged by 54% of antivirus engines (86 detections). Linked to Revil malware.

Detection summary

  • 86 antivirus detections (54% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: REVIL (S0496)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic.Ransom.Sodinokibi Hybrid-Analysis 2019-06-21 18:45:04 2019-06-21 18:45:04 S0496 REvil

Tags

ransomware

Sample information

Filenames
eTeb5BGH.dll
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
164864 bytes
MD5
f3df097f9a07f1f0680137f453640c9b
SHA-1
3eecf4719dd7cd497bfcb759ba82cdd3023d2342
SHA-256
10071748cab19d1d637f24bbbb1e9fb677da5110d1cf91988436064b4694165c
First indexed
2019-06-21 18:45:04
Last updated
2026-10-07 06:08:31

Antivirus detections

EngineDetection
MicroWorld-eScanGeneric.Ransom.Sodinokibi.F872703C
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderGeneric.Ransom.Sodinokibi.F872703C
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
NANO-AntivirusVirus.Win32.Gen.ccmw
SymantecRansom.Sodinokibi
ESET-NOD32a variant of Win32/GenKryptik.DKYU
APEXMalicious
ClamAVWin.Ransomware.Sodinokibi-6995593-0
GDataGeneric.Ransom.Sodinokibi.F872703C
KasperskyTrojan.Win32.DelShad.mn
RisingTrojan.Filecoder!8.68 (RDM+:cmRtazopFqvA9uPKGhXmmpgA5l6z)
Endgamemalicious (high confidence)
EmsisoftGeneric.Ransom.Sodinokibi.F872703C (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
ZillyaTrojan.DelShad.Win32.85
Invinceaheuristic
FireEyeGeneric.mg.f3df097f9a07f1f0
SentinelOneDFI - Malicious PE
MaxSecureTrojan.Malware.74383981.susgen
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=87)
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmTrojan.Win32.DelShad.mn
AhnLab-V3Trojan/Win32.Ransom.C3289736
Acronissuspicious
VBA32BScope.Exploit.Nekto
ALYacGeneric.Ransom.Sodinokibi.F872703C
Ad-AwareGeneric.Ransom.Sodinokibi.F872703C
MalwarebytesRansom.Sodinokibi
YandexTrojan.DelShad!
IkarusTrojan-Ransom.Sodinokibi
FortinetW32/GenKryptik.DKYU!tr
AVGWin32:Malware-gen
AvastWin32:Malware-gen
Qihoo-360HEUR/QVM40.1.039D.Malware.Gen
ALYacTrojan.Ransom.Sodinokibi
AVGWin32:CVE-2018-8453-M [Expl]
AhnLab-V3Trojan/Win32.Ransom.R282990
AlibabaExploit:Win32/CVE-2018-8453.e17a7547
Antiy-AVLTrojan[Ransom]/Win32.Sodinokibi
ArcabitGeneric.Ransom.Sodinokibi.FDD50FFC
AvastWin32:CVE-2018-8453-M [Expl]
BkavW32.AIDetectMalware
CAT-QuickHealRansom.Revil.S27666417
CTXdll.trojan.sodinokibi
ClamAVWin.Ransomware.Sodinokibi-6996917-1
CrowdStrikewin/malicious_confidence_100% (W)
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebTrojan.Encoder.36818
ESET-NOD32a variant of Win32/Filecoder.Sodinokibi.G
ElasticWindows.Ransomware.Sodinokibi
FortinetW32/Sodinokibi.B!tr
GoogleDetected
GridinsoftTrojan.Heur!.020120A0
JiangminTrojan.Crypmod.abb
K7AntiVirusTrojan ( 0059cc201 )
K7GWTrojan ( 0059cc201 )
KasperskyHEUR:Trojan-Ransom.Win32.Sodin.vho
Kingsoftmalware.kb.a.1000
LionicTrojan.Win32.Sodinokibi.j!c
MalwarebytesCrypt.Trojan.Malicious.DDS
MaxSecureTrojan.Malware.104598789.susgen
McAfeeRansom-REvil!F3DF097F9A07
McAfeeDti!10071748CAB1
MicrosoftExploit:Win32/CVE-2018-8453.A
NANO-AntivirusTrojan.Win32.DelShad.ftmaak
Paloaltogeneric.ml
PandaTrj/CI.A
RisingRansom.Sodinokibi!1.CB04 (CLASSIC)
SangforRansom.Win32.Sodinokibi_1.se2
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Infected.ch
SophosTroj/Sodino-BU
TencentTrojan-Ransom.Win32.Sodinokibi.gen
TrendMicroRansom.Win32.SODINOKIBI.THJOBAI
TrendMicro-HouseCallRansom.Win32.SODINOKIBI.THJOBAI
VIPREGeneric.Ransom.Sodinokibi.F872703C
VaristW32/Trojan.RYAT-8785
WebrootW32.Ransomware.Gen
XcitiumTrojWare.Win32.Ransom.Sodinokibi.S@8cwc8h
YandexTrojan.GenAsa!TU+2Nra8p58
huorongRansom/Sodinokibi.b

Process list

NameCommand line
rundll32.exe"C:\eTeb5BGH.dll",DllMain