4265b4461d213a6e99447fc255a5d4de9a18b92756cfb66a247472261ab01154

Classification: Malicious

4265b4461d213a6e99447fc255a5d4de9a18b92756cfb66a247472261ab01154 is a ransomware (Windows executable, 116.0 KB). Linked to Revil malware.

Detection summary

  • 51 antivirus detections (71% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: REVIL (S0496)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DeepScan:Generic.Ransom.Sodinokibi Hybrid-Analysis 2020-08-03 03:30:04 2020-08-03 03:30:04 S0496 REvil

Sample information

Filenames
19a2df9705fb6d4bb13fa4058713d99c
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
118784 bytes
MD5
19a2df9705fb6d4bb13fa4058713d99c
SHA-1
5d6ea962a94c5065537054390a813a40e2f1643d
SHA-256
4265b4461d213a6e99447fc255a5d4de9a18b92756cfb66a247472261ab01154
First indexed
2020-08-03 03:30:04
Last updated
2026-09-25 17:42:48

Antivirus detections

EngineDetection
BkavW32.AIDetectVM.malware2
DrWebTrojan.Encoder.30497
MicroWorld-eScanDeepScan:Generic.Ransom.Sodinokibi.33D0C3E1
FireEyeGeneric.mg.19a2df9705fb6d4b
CAT-QuickHealTrojan.CrypmodRI.S14849031
McAfeeSodinokibi!19A2DF9705FB
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.2208276
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
CrowdStrikewin/malicious_confidence_100% (D)
ArcabitDeepScan:Generic.Ransom.Sodinokibi.33D0C3E1
TrendMicroRansom.Win32.SODINOKIBI.SMTH
BitDefenderThetaGen:NN.ZedlaF.34144.hu4@aGnovRb
F-ProtW32/Kryptik.AKW.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HEVC
APEXMalicious
ClamAVWin.Ransomware.Sodinokibi-7013612-0
KasperskyHEUR:Trojan-Ransom.Win32.Crypmod.vho
BitDefenderDeepScan:Generic.Ransom.Sodinokibi.33D0C3E1
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.10cdde3f
Ad-AwareDeepScan:Generic.Ransom.Sodinokibi.33D0C3E1
SophosTroj/Sodino-BU
F-SecureTrojan.TR/Crypt.XPACK.Gen
Invinceaheuristic
EmsisoftDeepScan:Generic.Ransom.Sodinokibi.33D0C3E1 (B)
IkarusTrojan-Ransom.Sodinokibi
CyrenW32/Kryptik.AKW.gen!Eldorado
AviraTR/Crypt.XPACK.Gen
FortinetW32/Sodinokibi.B!tr.ransom
Antiy-AVLTrojan[Ransom]/Win32.Crypmod
Endgamemalicious (high confidence)
MicrosoftRansom:Win32/Sodinokibi.DSB!MTB
ZoneAlarmHEUR:Trojan-Ransom.Win32.Crypmod.vho
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.RL_Ransom.R290570
VBA32BScope.Trojan.DelShad
ALYacDeepScan:Generic.Ransom.Sodinokibi.33D0C3E1
MAXmalware (ai score=86)
MalwarebytesRansom.Sodinokibi
TrendMicro-HouseCallRansom.Win32.SODINOKIBI.SMTH
RisingRansom.Crypmod!8.DA9 (TFE:5:PMZ9rOIdlIV)
SentinelOneDFI - Malicious PE
GDataDeepScan:Generic.Ransom.Sodinokibi.33D0C3E1
AVGWin32:Malware-gen
PandaTrj/GdSda.A
Qihoo-360HEUR/QVM40.1.FD0F.Malware.Gen

Process list

NameCommand line
<Ignored Process>
regsvr32.exe/s "C:\19a2df9705fb6d4bb13fa4058713d99c.dll"