2023-03-12_99c451001b4a530a578952665ec526be_crysis
Classification: Malicious
2023-03-12_99c451001b4a530a578952665ec526be_crysis is a ransomware (application/x-dosexec). Detected by 66 antivirus engines. Linked to Wiper malware.
Detection summary
- 66 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: WIPER (S0041)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ransomware | VM-Ray | 2023-03-13 13:21:06 | 2023-03-13 13:21:06 | ||
| Wiper | VM-Ray | 2023-03-13 13:21:06 | 2023-03-13 13:21:06 | S0041 Wiper | |
| Dharma | MalwareBazaar Abuse.ch | 2023-03-13 11:08:36 | 2023-03-13 11:08:36 |
Sample information
- Filenames
- 245f7a3c993a0ecada1c1f8936ea82e8e48812c5758767e5d91db91324bc303a.exe, 2023-03-12_99c451001b4a530a578952665ec526be_crysis
- File type
- application/x-dosexec
- MD5
99c451001b4a530a578952665ec526be- SHA-1
6fb938ac4f76843d4ff37fc9d822f76a86f7feb2- SHA-256
245f7a3c993a0ecada1c1f8936ea82e8e48812c5758767e5d91db91324bc303a- First indexed
- 2023-03-13 11:08:36
- Last updated
- 2026-09-16 09:00:18
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Ransom.Crysis |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Ransom] |
| AhnLab-V3 | Ransomware/Win.Crysis.R213980 |
| Alibaba | Ransom:Win32/Crusis.2b2 |
| Antiy-AVL | Trojan[Ransom]/Win32.Crysis |
| Arcabit | Trojan.Ransom.Crysis.E |
| Avast | Win32:MalwareX-gen [Ransom] |
| Avira | TR/Dropper.Gen |
| BitDefender | Trojan.Ransom.Crysis.E |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Ransom.Crysis.A3 |
| CTX | exe.ransomware.crysis |
| ClamAV | Win.Trojan.Dharma-6668198-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.3953 |
| ESET-NOD32 | a variant of Win32/Filecoder.Crysis.P |
| Elastic | Windows.Ransomware.Dharma |
| Emsisoft | Trojan.Ransom.Crysis.E (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| Fortinet | W32/Crysis.L!tr.ransom |
| GData | Win32.Trojan-Ransom.VirusEncoder.A |
| Detected | |
| Gridinsoft | Ransom.Win32.STOP.dd!se42548 |
| Ikarus | Trojan-Ransom.Crysis |
| Jiangmin | Trojan.Crypren.ic |
| K7AntiVirus | Trojan ( 00519f781 ) |
| K7GW | Trojan ( 00519f781 ) |
| Kaspersky | Trojan-Ransom.Win32.Crusis.to |
| Kingsoft | Win32.Troj.Undef.a |
| Lionic | Trojan.Win32.Crusis.tqMs |
| Malwarebytes | Generic.Ransom.FileCryptor.DDS |
| MaxSecure | Trojan-Ransom.Win32.Crusis.To |
| McAfeeD | Real Protect-LS!99C451001B4A |
| MicroWorld-eScan | Trojan.Ransom.Crysis.E |
| Microsoft | Ransom:Win32/Wadhrama!pz |
| NANO-Antivirus | Trojan.Win32.Filecoder.emdnxn |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Crysis!1.A6AA (CLASSIC) |
| SUPERAntiSpyware | Ransom.Crysis/Variant |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | BehavesLike.Win32.Generic.nc |
| Sophos | Troj/Criakl-G |
| Symantec | Ransom.Crysis |
| Tencent | Trojan-Ransom.Win32.Crysis.a |
| Trapmine | malicious.high.ml.score |
| TrellixENS | Ransom-Dharma!99C451001B4A |
| TrendMicro | Ransom.Win32.CRYSIS.SM |
| TrendMicro-HouseCall | Ransom.Win32.CRYSIS.SM |
| VBA32 | TrojanRansom.Crusis |
| VIPRE | Trojan.Ransom.Crysis.E |
| Varist | W32/Trojan.ILHO-9216 |
| ViRobot | Trojan.Win32.Ransom.94720.F |
| VirIT | Trojan.Win32.Genus.ODY |
| Webroot | W32.Ransom.Gen |
| Xcitium | TrojWare.Win32.Crysis.D@6sd9xy |
| Yandex | Trojan.GenAsa!PU4zXkABPRE |
| Zillya | Trojan.Crusis.Win32.2637 |
| ZoneAlarm | Troj/Criakl-G |
| alibabacloud | RansomWare |
| huorong | Ransom/Crysis.a |