53b1c1b2f41a7fc300e97d036e57539453ff82001dd3f6abf07f4896b1f9ca22

Classification: Malicious

53b1c1b2f41a7fc300e97d036e57539453ff82001dd3f6abf07f4896b1f9ca22 is a ransomware (application/x-dosexec, 190.0 KB). Detected by 88 antivirus engines.

Detection summary

  • 88 antivirus detections
  • 0 IDS alerts
  • 6 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CONTI (S0575)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-02-08 22:45:03 2025-09-30 09:22:45
Conti Abuse.ch 2021-08-08 22:41:25 2021-08-08 22:41:25 malicious-activity S0575 Conti

Sample information

Filenames
53b1c1b2f41a7fc300e97d036e57539453ff82001dd3f6abf07f4896b1f9ca22.exe, 53b1c1b2f41a7fc300e97d036e57539453ff82001dd3f6abf07f4896b1f9ca22.bin
File type
application/x-dosexec
Size
194560 bytes
MD5
290c7dfb01e50cea9e19da81a781af2c
SHA-1
8a52c7645ec8fd6c217dfe5491461372acc4e849
SHA-256
53b1c1b2f41a7fc300e97d036e57539453ff82001dd3f6abf07f4896b1f9ca22
First indexed
2021-08-09 00:00:04
Last updated
2026-03-22 09:55:53

Antivirus detections

EngineDetection
ALYacTrojan.Ransom.Conti
APEXMalicious
AVGWin32:Conti-B [Ransom]
Acronissuspicious
AhnLab-V3Ransomware/Win.Conti.R372647
AlibabaRansom:Win32/CONTI.3eabc0c0
Antiy-AVLTrojan[Ransom]/Win32.Conti
ArcabitTrojan.Ransom.Conti.135
AvastWin32:Conti-B [Ransom]
AviraHEUR/AGEN.1366989
BitDefenderGen:Variant.Ransom.Conti.135
BitDefenderThetaGen:NN.ZexaF.36680.luW@aywU67ki
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.GenericRI.S23757131
ClamAVWin.Ransomware.Conti-9826703-0
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.45ec8f
Cylanceunsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebTrojan.Encoder.34230
ESET-NOD32a variant of Win32/Filecoder.Conti.K
ElasticWindows.Ransomware.Conti
EmsisoftGen:Variant.Ransom.Conti.135 (B)
F-SecureHeuristic.HEUR/AGEN.1366989
FireEyeGeneric.mg.290c7dfb01e50cea
FortinetW32/Conti.F!tr.ransom
GDataGen:Variant.Ransom.Conti.135
GoogleDetected
GridinsoftRansom.Win32.AI.oa!s1
IkarusTrojan-Ransom.Conti
JiangminTrojan.Agent.dmrd
K7AntiVirusTrojan ( 005749d01 )
K7GWTrojan ( 005749d01 )
KasperskyHEUR:Trojan-Ransom.Win32.Conti.gen
Kingsoftmalware.kb.a.985
LionicTrojan.Win32.Encoder.trM5
MAXmalware (ai score=100)
MalwarebytesMalware.AI.863537440
MaxSecureTrojan.Malware.118212484.susgen
McAfeeGenericRXNC-DC!290C7DFB01E5
MicroWorld-eScanGen:Variant.Ransom.Conti.135
MicrosoftRansom:Win32/ContiCrypt!MTB
PandaTrj/GdSda.A
RisingRansom.Conti!1.DF1E (CLASSIC)
SangforRansom.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.NetLoader.ch
SophosMal/Generic-S
SymantecRansom.Conti
TACHYONRansom/W32.Conti.194560.B
TencentMalware.Win32.Gencirc.10bdc0ca
TrendMicroRansom.Win32.CONTI.SMTH.hp
TrendMicro-HouseCallRansom.Win32.CONTI.SMTH.hp
VBA32BScope.TrojanRansom.Cryptor
VIPREGen:Variant.Ransom.Conti.135
VaristW32/Filecoder.GC.gen!Eldorado
ViRobotTrojan.Win32.Z.Conti.194560
WebrootW32.Ransom.Conti
XcitiumMalware@#1n4nduswp75ev
YandexTrojan.Filecoder!0qUTma8ZJio
ZillyaTrojan.Filecoder.Win32.20671
ZoneAlarmHEUR:Trojan-Ransom.Win32.Conti.gen
BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.356529
ALYacGen:Variant.Zusy.356529
MalwarebytesMalware.AI.3421010578
SangforTrojan.Win32.Save.a
AlibabaRansom:Win32/CONTI.b5c9d660
Cybereasonmalicious.b01e50
SymantecML.Attribute.HighConfidence
Paloaltogeneric.ml
KasperskyUDS:Trojan-Ransom.Win32.Conti.gen
BitDefenderGen:Variant.Zusy.356529
RisingRansom.Conti!1.D637 (CLASSIC)
Ad-AwareGen:Variant.Zusy.356529
EmsisoftGen:Variant.Zusy.356529 (B)
McAfee-GW-EditionGenericRXNC-DC!290C7DFB01E5
JiangminTrojan.Generic.dzzcl
AviraHEUR/AGEN.1138121
MicrosoftRansom:Win32/CONTI.DC!MTB
GDataGen:Variant.Zusy.356529
CynetMalicious (score: 99)
MAXmalware (ai score=87)
MaxSecureTrojan.Malware.300983.susgen
BitDefenderThetaGen:NN.ZexaF.34050.luW@aywU67ki
Qihoo-360Win32/Ransom.Generic.HwoC2hsA

Process list

NameCommand line
53b1c1b2f41a7fc300e97d036e57539453ff82001dd3f6abf07f4896b1f9ca22.exe
WerFault.exe-u -p 7744 -s 696
WerFault.exe-pss -s 432 -p 7744 -ip 7744
53b1c1b2f41a7fc300e97d036e57539453ff82001dd3f6abf07f4896b1f9ca22.exe
WerFault.exe-u -p 3016 -s 676
WerFault.exe-pss -s 476 -p 3016 -ip 3016