wolkafashion.pl_ransome.exe
Classification: Malicious
wolkafashion.pl_ransome.exe is a malicious file sample. Linked to Nanocore malware. Reported by 1 threat source, last seen 2026-09-03.
Detection summary
- 43 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: NANOCORE (S0336)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Nanocore | Triage | 2026-09-03 01:30:25 | 2026-09-03 01:30:25 | malicious-activity | S0336 NanoCore |
Tags
nanocore defense_evasion discovery execution impact keylogger persistence privilege_escalation ransomware spyware stealer trojanSample information
- Filenames
- wolkafashion.pl_ransome.exe
- SHA-256
6a8f2b3a330b305631bf61821a4c07cdab20804f3418f6bffc0c7eaf83f1397a- First indexed
- 2026-09-03 01:30:25
- Last updated
- 2026-09-03 01:30:25
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| AhnLab-V3 | Ransomware/Win.HiddenTears.C5880886 |
| Antiy-AVL | Trojan[Ransom]/Win32.HiddenTears |
| Arcabit | Trojan.Ransom.HiddenTears.1 |
| Avira | TR/Dropper.Gen |
| BitDefender | Gen:Heur.Ransom.HiddenTears.1 |
| Bkav | W32.Malware.71BE3EDC |
| CTX | exe.ransomware.hiddentears |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cylance | Unsafe |
| DrWeb | Trojan.Siggen32.40454 |
| ESET-NOD32 | MSIL/Agent.YGX trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Heur.Ransom.HiddenTears.1 (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| GData | Gen:Heur.Ransom.HiddenTears.1 |
| K7AntiVirus | Spyware ( 700000201 ) |
| K7GW | Spyware ( 700000201 ) |
| Kaspersky | HEUR:Trojan-Ransom.MSIL.RDCry.gen |
| Kingsoft | malware.kb.c.868 |
| Malwarebytes | Spyware.KeyLogger |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | Real Protect-LS!8B28F3BAF1B3 |
| MicroWorld-eScan | Gen:Heur.Ransom.HiddenTears.1 |
| Microsoft | Ransom:Win32/HiddenTears.ARR!MTB |
| Panda | Trj/GdSda.A |
| Rising | Malware.Undefined!8.C (TFE:dGZlOg3/RQC6O2DFkQ) |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Sophos | Troj/NanoCr-PK |
| Symantec | ML.Attribute.HighConfidence |
| TACHYON | Trojan/W32.DN-Agent.40448.CA |
| Tencent | Trojan-Ransom.Win32.Dcrypt.16003863 |
| Trapmine | suspicious.low.ml.score |
| TrendMicro | Ransom.MSIL.CRYPTOLOCKER.SM.hp |
| TrendMicro-HouseCall | Ransom.MSIL.CRYPTOLOCKER.SM.hp |
| VBA32 | TScope.Trojan.MSIL |
| VIPRE | Gen:Heur.Ransom.HiddenTears.1 |
| Varist | W32/NanoCore.P.gen!Eldorado |
| Webroot | W32.Malware.Gen |
| Zillya | Trojan.AgentGen.Win32.112 |
| ZoneAlarm | Troj/NanoCr-PK |
| huorong | Ransom/LockFile.kg |