Ransomware.zip

Classification: Malicious

Ransomware.zip is a malicious file sample. Linked to Mimikatz, Wannacry malware. 11 sightings from Triage, last seen 2026-09-06.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: MIMIKATZ (S0002) WANNACRY (S0366) BAD RABBIT (S0606)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Badrabbit Triage 2026-04-20 09:05:35 2026-09-06 10:46:07 malicious-activity S0606 Bad Rabbit
Generic Malware Triage 2026-05-11 22:49:14 2026-05-11 22:49:14 malicious-activity
Cryptolocker Triage 2026-04-19 07:06:11 2026-04-26 11:25:26 malicious-activity
Infinitylock Triage 2026-04-19 17:44:43 2026-04-19 23:18:22 malicious-activity
Wannacry Triage 2026-04-19 18:21:42 2026-04-19 18:21:42 malicious-activity S0366 WannaCry
Mimikatz Triage 2026-03-26 18:59:22 2026-03-26 18:59:22 malicious-activity S0002 Mimikatz
Fantom Triage 2026-03-18 19:07:50 2026-03-18 19:07:50 malicious-activity

Tags

badrabbit cerber cryptolocker dharma fantom gandcrab infinitylock metasploit mimikatz nabucur petya troldesh adware backdoor bootkit credential_access defense_evasion discovery evasion execution impact lateral_movement persistence privilege_escalation ransomware spyware stealer trojan upx wannacry revoked_codesign worm seven suricata hiddentear

Sample information

Filenames
Ransomware.zip, tmpog90g30g
MD5
03e52009f9429ec5f7bc25aa5f23bff3
SHA-1
8486848ae4dfeb66626baaa6e7ca37a3c3ba903a
SHA-256
72f6748f1c16b750d00541597668e5c306f77759dc998f65f33fe94b8c765b90
SHA-512
cfd5427557c16f6a4e80ed713dcf47845c51185647b6de199c83b6ea4d2d6b7144379b553de088e329baf25a5e1818260d019debc6b60e9cf5f6155936a4f397
First indexed
2026-03-18 19:07:50
Last updated
2026-10-13 20:41:46