gent_encryptor.exe

Classification: Malicious

gent_encryptor.exe is a malicious file sample (Windows 64-bit executable). Linked to The Gentlemen activity. 10 sightings, last seen 2026-09-17.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: THE GENTLEMEN (G1058)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Gentlemen Triage 2026-09-17 17:10:42 2026-09-17 17:10:42 malicious-activity
Generic Malware Cyber Threat Alliance 2026-08-12 10:19:37 2026-09-09 10:11:44 malicious-activity
The Gentlemen ransomware Windows encryptor payload Cybereason 2025-09-09 00:00:00 2026-06-09 00:00:00 malicious-activity G1058 The Gentlemen
The Gentlemen ransomware Windows encryptor payload Check Point Research 2026-05-13 00:00:00 2026-06-09 00:00:00 malicious-activity G1058 The Gentlemen
The Gentlemen ransomware Windows encryptor payload Dark Atlas 2026-06-09 00:00:00 2026-06-09 00:00:00 malicious-activity G1058 The Gentlemen
Gentlemen ThreatFox Abuse.ch 2026-05-13 15:06:14 2026-05-13 15:25:05
Generic Malware Hybrid-Analysis 2026-02-11 03:45:04 2026-02-11 04:45:07

Tags

cerber ransomware win.gentlemen payload the-gentlemen gentlemen execution

Sample information

Filenames
gent_encryptor.exe, hapvida.exe
File type
PE32+ executable for MS Windows 6.01 (console), x8 ...
MD5
4200b46a93c6ab059e2b34ce200c4a5b
SHA-1
42bcc743c71a9ea083c1c750a398110582796762
SHA-256
3ab9575225e00a83a4ac2b534da5a710bdcf6eb72884944c437b5fbe5c5c9235
First indexed
2025-09-09 00:00:00
Last updated
2026-09-10 06:06:34