sub_7b2449bb8be1.bin

Classification: Malicious

sub_7b2449bb8be1.bin is a ransomware (Windows executable, 2.9 MB). Flagged by 71% of antivirus engines (61 detections). Linked to Blackcat malware.

Detection summary

  • 61 antivirus detections (71% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: BLACKCAT (S1068)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-08-26 10:23:23 2026-08-26 10:23:23 malicious-activity
Blackcat Triage 2026-05-24 01:32:52 2026-05-24 01:32:52 malicious-activity S1068 BlackCat
BlackCat ThreatFox Abuse.ch 2022-01-08 06:03:30 2022-01-10 00:02:58 S1068 BlackCat

Tags

win.blackcat alphv noberus blackcat discovery ransomware

Sample information

Filenames
sub_7b2449bb8be1.bin, 7b2449bb8be1b37a9d580c2592a67a759a3116fe640041d0f36dc93ca3db4487
File type
PE32 executable (GUI) Intel 80386 (stripped to ext ...
Size
3077120 bytes
MD5
81d7c2d1dca5da7eef2896a76768d142
SHA-1
57a6dfd2b021e5a4d4fe34a61bf3242ecee841b3
SHA-256
7b2449bb8be1b37a9d580c2592a67a759a3116fe640041d0f36dc93ca3db4487
First indexed
2022-01-06 07:52:41
Last updated
2026-08-25 23:16:14

Antivirus detections

EngineDetection
ALYacTrojan.Ransom.BlackCat
APEXMalicious
AVGWin32:RansomX-gen [Ransom]
AhnLab-V3Trojan/Win.Generic.R499440
AlibabaRansom:Win32/BlackCat.459141fd
Antiy-AVLTrojan[Ransom]/Win32.BlackCat
ArcabitTrojan.Ransom.BlackCatALPHV.9
AvastWin32:RansomX-gen [Ransom]
AviraHEUR/AGEN.1345489
BitDefenderGen:Variant.Ransom.BlackCatALPHV.9
BkavW32.Common.34A0B247
CAT-QuickHealRansom.Blackcat.S26416946
CTXexe.ransomware.blackcat
ClamAVWin.Ransomware.BlackCat-9934796-0
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebTrojan.Encoder.34786
ESET-NOD32a variant of Win32/Filecoder.BlackCat.A
ElasticMulti.Ransomware.BlackCat
EmsisoftGen:Variant.Ransom.BlackCatALPHV.9 (B)
F-SecureHeuristic.HEUR/AGEN.1345489
FireEyeGeneric.mg.81d7c2d1dca5da7e
FortinetW32/Filecoder.A!tr.ransom
GDataGen:Variant.Ransom.BlackCatALPHV.9
GoogleDetected
GridinsoftRansom.Win32.AI.oa!s1
IkarusTrojan-Ransom.BlackCat
JiangminTrojan.Generic.hjatl
K7AntiVirusRansomware ( 005ad4021 )
K7GWRansomware ( 005ad4021 )
KasperskyHEUR:Trojan-Ransom.Win32.Generic
KingsoftWin32.Trojan-Ransom.Generic.a
LionicTrojan.Win32.Generic.j!c
MalwarebytesGeneric.Malware.AI.DDS
MaxSecureTrojan.Malware.10307848.susgen
McAfeeRansom-BlackCat!81D7C2D1DCA5
McAfeeDti!7B2449BB8BE1
MicroWorld-eScanGen:Variant.Ransom.BlackCatALPHV.9
MicrosoftRansom:Win32/BlackCat!pz
Paloaltogeneric.ml
PandaTrj/Genetic.gen
RisingRansom.BlackCat!1.DB0B (CLASSIC)
SangforRansom.Win32.Blackcat.Vpyx
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.RansomBlackCat.vh
SophosTroj/Ransom-GSD
SymantecRansom.Noberus
TencentMalware.Win32.Gencirc.10bdd430
TrendMicroRansom.Win32.BLACKCAT.SMYXBLK
VBA32TrojanRansom.Agent
VIPREGen:Variant.Ransom.BlackCatALPHV.9
VaristW32/Filecoder.CP.gen!Eldorado
ViRobotTrojan.Win.Z.Blackcat.3077120
WebrootW32.Ransom.Blackcat
XcitiumMalware@#1n7deuonah5ru
YandexTrojan.Filecoder!S8GjIam1O1Q
ZillyaTrojan.Filecoder.Win32.21215
alibabacloudRansomWare
huorongHEUR:Ransom/ShadowDel.a

Process list

NameCommand line
7b2449bb8be1b37a9d580c2592a67a759a3116fe640041d0f36dc93ca3db4487.exe