Latest_Crypto.exe

Classification: Malicious

Latest_Crypto.exe is a ransomware (Windows executable, 179.5 KB). Flagged by 64% of antivirus engines (92 detections). Linked to Revil malware.

Detection summary

  • 92 antivirus detections (64% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: REVIL (S0496)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DeepScan:Generic.Ransom.Sodinokibi Hybrid-Analysis 2019-12-10 14:30:04 2019-12-10 14:30:04 S0496 REvil

Tags

ransomware

Sample information

Filenames
Latest_Crypto.exe
File type
PE32 executable (console) Intel 80386, for MS Windows
Size
183808 bytes
MD5
22440561cad1d76ac5ed3ead8263295b
SHA-1
9961eadf743a9a79026ee9d576f25d96ab39bd4c
SHA-256
5a7e1519c4f691867984b01af484740b6022bd0aa9c72a74963c6b7a30e74a59
First indexed
2019-12-10 14:30:04
Last updated
2026-09-24 18:02:19

Antivirus detections

EngineDetection
MicroWorld-eScanDeepScan:Generic.Ransom.Sodinokibi.5021C298
McAfeeGenericRXJA-MY!22440561CAD1
CylanceUnsafe
ZillyaTrojan.Filecoder.Win32.11208
SangforMalware
K7AntiVirusTrojan ( 0054d99c1 )
K7GWTrojan ( 0054d99c1 )
CrowdStrikewin/malicious_confidence_80% (D)
ArcabitDeepScan:Generic.Ransom.Sodinokibi.5021C298
TrendMicroRansom.Win32.SODINOKIB.SMTH
ESET-NOD32a variant of Win32/Filecoder.Sodinokibi.B
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Ransomware.Sodinokibi-7013612-0
GDataDeepScan:Generic.Ransom.Sodinokibi.5021C298
BitDefenderDeepScan:Generic.Ransom.Sodinokibi.5021C298
NANO-AntivirusTrojan.Win32.Filecoder.gjxmxm
Ad-AwareDeepScan:Generic.Ransom.Sodinokibi.5021C298
F-SecureHeuristic.HEUR/AGEN.1005913
DrWebTrojan.Encoder.28004
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.MultiPlug.cc
Trapminemalicious.high.ml.score
EmsisoftDeepScan:Generic.Ransom.Sodinokibi.5021C298 (B)
IkarusTrojan-Ransom.Sodinokibi
AviraHEUR/AGEN.1005913
Antiy-AVLTrojan[Ransom]/Win32.Sodinokibi
MicrosoftRansom:Win32/Sodinokibi.S!MSR
Endgamemalicious (high confidence)
AhnLab-V3Malware/Win32.Ransom.C3348806
Acronissuspicious
BitDefenderThetaGen:NN.ZexaCO3.32519.luW@aaIs0vf
ALYacDeepScan:Generic.Ransom.Sodinokibi.5021C298
MAXmalware (ai score=81)
VBA32BScope.Trojan.DelShad
MalwarebytesRansom.Sodinokibi
TrendMicro-HouseCallRansom.Win32.SODINOKIB.SMTH
RisingRansom.Sodin!8.10CD8 (TFE:2:tgu5Cp8rQfB)
YandexTrojan.Filecoder!aIDwF6BhIjI
FortinetW32/Sodinokibi.B!tr.ransom
AVGWin32:Malware-gen
Cybereasonmalicious.1cad1d
PandaGeneric Malware
Qihoo-360HEUR/QVM20.1.CAF7.Malware.Gen
ALYacTrojan.Ransom.Sodinokibi
AVGWin32:Sodinokibi-D [Ransom]
AhnLab-V3Malware/Win32.RL_Ransom.R361232
AlibabaRansom:Win32/Sodin.29e73d8e
ArcabitTrojan.Ransom.Sodinokibi.351
AvastWin32:Sodinokibi-D [Ransom]
AviraHEUR/AGEN.1316788
BitDefenderGen:Variant.Ransom.Sodinokibi.351
BkavW32.AIDetectMalware
CAT-QuickHealRansom.Revil.S28288300
CTXexe.ransomware.sodinokibi
CrowdStrikewin/malicious_confidence_100% (W)
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
ElasticWindows.Ransomware.Sodinokibi
EmsisoftGen:Variant.Ransom.Sodinokibi.351 (B)
F-SecureHeuristic.HEUR/AGEN.1316788
FireEyeGeneric.mg.22440561cad1d76a
GDataGen:Variant.Ransom.Sodinokibi.351
GoogleDetected
GridinsoftRansom.Win32.STOP.dd!s1
JiangminTrojan.Encoder.sa
KasperskyTrojan-Ransom.Win32.Sodin.be
Kingsoftmalware.kb.a.979
LionicTrojan.Win32.Sodin.trhJ
MalwarebytesCrypt.Trojan.Malicious.DDS
MaxSecureTrojan.Malware.73926358.susgen
McAfeeDti!5A7E1519C4F6
MicroWorld-eScanGen:Variant.Ransom.Sodinokibi.351
MicrosoftRansom:Win32/Revil.A
Paloaltogeneric.ml
PandaTrj/CI.A
SangforRansom.Win32.Sodinokibi_1.se2
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Generic.cc
SophosTroj/Sodino-BU
SymantecRansom.Sodinokibi
TACHYONRansom/W32.Sodinokibi.183808
TencentTrojan-Ransom.Win32.Sodinokibi.gen
VBA32BScope.TrojanRansom.Sodin
VIPREGen:Variant.Ransom.Sodinokibi.351
VaristW32/Kryptik.AKW.gen!Eldorado
VirITTrojan.Win32.Sodinokibi.BZK
WebrootW32.Trojan.Gen
YandexTrojan.GenAsa!Z2Axs0Y5Ek8
ZoneAlarmTroj/Sodino-BU
alibabacloudRansomware:Win/Sodinokibi.B
huorongRansom/Sodinokibi.g

Process list

NameCommand line
Latest_Crypto.exe
powershell.exepowershell -e RwBlAHQALQBXAG0AaQBPAGIAagBlAGMAdAAgAFcAaQBuADMAMgBfAFMAaABhAGQAbwB3AGMAbwBwAHkAIAB8ACAARgBvAHIARQBhAGMAaAAtAE8AYgBqAGUAYwB0ACAAewAkAF8ALgBEAGUAbABlAHQAZQAoACkAOwB9AA==