2026-06-04_bedab9fb22e8edcadd157531bd7ddfef_cadelspy_glassworm_ngrbot_qilin_stealc

Classification: Malicious

2026-06-04_bedab9fb22e8edcadd157531bd7ddfef_cadelspy_glassworm_ngrbot_qilin_stealc is a ransomware. Detected by 7 antivirus engines.

Detection summary

  • 7 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CADELSPY (S0454)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Cadelspy Triage 2026-06-04 12:06:33 2026-06-04 12:06:33 malicious-activity S0454 Cadelspy

Tags

cadelspy backdoor trojan

Sample information

Filenames
2026-06-04_bedab9fb22e8edcadd157531bd7ddfef_cadelspy_glassworm_ngrbot_qilin_stealc
SHA-256
1b855f104760150b94403312a4dc21b524141cf7fa82334ee0b0dd9e8d4162ba
First indexed
2026-06-04 12:06:33
Last updated
2026-08-05 00:30:45

Antivirus detections

EngineDetection
KasperskyHEUR:Trojan.PowerShell.Generic
KingsoftWin32.Troj.Unknown.a
RisingRansom.LockFile!8.12D75 (CLOUD)
Trapminesuspicious.low.ml.score
TrendMicro-HouseCallRansom.Win64.LOCKFILE.TL0101F726ZK
alibabacloudBackdoor:Win/Meterpreter.BZ
huorongRansom/LockFile.au