2026-03-14_3931c82daf50cb031fa9ab3a02fbba90_elex_remcos_rhadamanthys_stop
Classification: Malicious
2026-03-14_3931c82daf50cb031fa9ab3a02fbba90_elex_remcos_rhadamanthys_stop is a malicious file sample. Linked to Clop malware.
Detection summary
- 62 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CLOP (S0611)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Clop | Triage | 2026-03-14 04:52:13 | 2026-03-14 04:52:13 | malicious-activity | S0611 Clop |
Tags
clop discovery ransomwareSample information
- Filenames
- 2026-03-14_3931c82daf50cb031fa9ab3a02fbba90_elex_remcos_rhadamanthys_stop
- MD5
3931c82daf50cb031fa9ab3a02fbba90- SHA-1
eea8174a9ab8aaba23fcacbbc2fa2af7f7edf13a- SHA-256
7777f2ce37ef842264ccda5d41a71f16c53059056677f980f22ac08677721682- SHA-512
1341aa05e6e620ad48fcd3eb7246813ae210854feac7cd9d97794606de099854573f2b7bfed2fe73127b5ead846243b7d38ca68289079315a933d7a867a0b1c9- First indexed
- 2026-03-14 04:52:13
- Last updated
- 2026-03-14 04:52:13
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Ransom.1301 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| AhnLab-V3 | Win-Trojan/Clopran.Exp |
| Alibaba | Trojan:Win32/Zudochka.66ee0693 |
| Antiy-AVL | Trojan/Win32.Deapax |
| Arcabit | Trojan.Ransom.D515 |
| Avast | Win32:Malware-gen |
| Avira | HEUR/AGEN.1327259 |
| BitDefender | Gen:Variant.Ransom.1301 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Ransom.Clop.S15351534 |
| CTX | exe.trojan.clop |
| ClamAV | Win.Ransomware.Ransomware-10059712-0 |
| CrowdStrike | win/malicious_confidence_90% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.27194 |
| ESET-NOD32 | Win32/Kryptik.GPOJ trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Ransom.1301 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1327259 |
| Fortinet | W32/Kryptik.GPOJ!tr |
| GData | Gen:Variant.Ransom.1301 |
| Detected | |
| Gridinsoft | Ransom.Win32.AI.sa |
| Ikarus | Trojan.Win32.Crypt |
| Jiangmin | Trojan.Zudochka.h |
| K7AntiVirus | Ransomware ( 005f43131 ) |
| K7GW | Ransomware ( 005f43131 ) |
| Kaspersky | Trojan.Win32.Zudochka.bl |
| Kingsoft | malware.kb.a.999 |
| Lionic | Trojan.Win32.Clop.4!c |
| Malwarebytes | Malware.AI.3358242980 |
| MaxSecure | Trojan.Malware.326161817.susgen |
| McAfeeD | Real Protect-LS!3931C82DAF50 |
| MicroWorld-eScan | Gen:Variant.Ransom.1301 |
| Microsoft | Ransom:Win32/Clop.E |
| NANO-Antivirus | Trojan.Win32.Zudochka.fmxqvh |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Ransom.Clop!1.B5E2 (CLASSIC) |
| Sangfor | Ransom.Win32.Clop.Vi58 |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | GenericRXHA-RK!3931C82DAF50 |
| Sophos | Mal/Generic-S |
| Symantec | Ransom.Ploc |
| Tencent | Malware.Win32.Gencirc.10bdcfa1 |
| Trapmine | malicious.moderate.ml.score |
| TrellixENS | GenericRXHA-RK!3931C82DAF50 |
| TrendMicro | Ransom.Win32.CLOP.SME |
| TrendMicro-HouseCall | Ransom.Win32.CLOP.SME |
| VBA32 | BScope.Trojan.Zudochka |
| VIPRE | Gen:Variant.Ransom.1301 |
| Varist | W32/Kryptik.SS.gen!Eldorado |
| ViRobot | Trojan.Win32.Ransom.241152.D |
| VirIT | Trojan.Win32.Encoder.BOFY |
| Yandex | Trojan.GenAsa!Gnub9lwSYrE |
| alibabacloud | Trojan[dropper]:Win/Zudochka.c56b12b8 |
| huorong | Ransom/Clop.a |
| tehtris | Generic.Malware |