sub_4e18f9293a6a.bin

Classification: Malicious

sub_4e18f9293a6a.bin is a ransomware (Windows executable, 2.9 MB). Flagged by 57% of antivirus engines (40 detections). Linked to Blackcat malware.

Detection summary

  • 40 antivirus detections (57% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: BLACKCAT (S1068)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-10-08 10:17:37 2026-10-08 10:17:37 malicious-activity
Blackcat Triage 2026-05-24 01:32:55 2026-05-24 01:32:55 malicious-activity S1068 BlackCat
BlackCat ThreatFox Abuse.ch 2022-01-08 06:03:31 2022-01-10 00:02:58 S1068 BlackCat

Tags

win.blackcat alphv noberus blackcat discovery ransomware

Sample information

Filenames
sub_4e18f9293a6a.bin, v2c.exe
File type
PE32 executable (GUI) Intel 80386 (stripped to ext ...
Size
3073536 bytes
MD5
70b8bc74f381c9d7d1016006c3950f85
SHA-1
655c2567650d2c109fab443de4b737294994f1fd
SHA-256
4e18f9293a6a72d5d42dad179b532407f45663098f959ea552ae43dbb9725cbf
First indexed
2021-12-30 15:15:52
Last updated
2026-08-25 23:16:14

Antivirus detections

EngineDetection
MicroWorld-eScanGen:Variant.Fragtor.49451
FireEyeGeneric.mg.70b8bc74f381c9d7
ALYacGen:Variant.Fragtor.49451
CylanceUnsafe
K7AntiVirusTrojan ( 0058bae31 )
K7GWTrojan ( 0058bae31 )
Cybereasonmalicious.7650d2
BitDefenderThetaGen:NN.ZexaCO.34114.7IW@aCRnBMf
CyrenW32/Filecoder.CP.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.OJP
TrendMicro-HouseCallRansom.Win32.BLACKCAT.YXBL1Z
KasperskyHEUR:Trojan-Ransom.Win32.Generic
BitDefenderGen:Variant.Fragtor.49451
AvastWin32:RansomX-gen [Ransom]
TencentWin32.Trojan.Filecoder.Aguy
Ad-AwareGen:Variant.Fragtor.49451
EmsisoftGen:Variant.Fragtor.49451 (B)
TrendMicroRansom.Win32.BLACKCAT.YXBL1Z
McAfee-GW-EditionBehavesLike.Win32.Rootkit.vh
SophosMal/Generic-S
APEXMalicious
GDataGen:Variant.Fragtor.49451
AviraTR/FileCoder.lnhyx
Antiy-AVLTrojan/Generic.ASMalwS.34F54F6
MicrosoftTrojan:Win32/Woreflint.A!cl
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C4834322
McAfeeGenericRXAA-AA!70B8BC74F381
MAXmalware (ai score=85)
VBA32BScope.TrojanRansom.Agent
MalwarebytesMalware.AI.3797928145
RisingRansom.Blackcat!1.DB0B (CLASSIC)
YandexTrojan.Filecoder!1pVHrfYo9JM
IkarusTrojan-Ransom.FileCrypter
FortinetW32/PossibleThreat
WebrootW32.Malware.Gen
AVGWin32:RansomX-gen [Ransom]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

Process list

NameCommand line
v2c.exe