2026-03-11_b04d56a0662120c5f1fc3e34511b686d_amadey_elex_hellokitty_play

Classification: Malicious

2026-03-11_b04d56a0662120c5f1fc3e34511b686d_amadey_elex_hellokitty_play is a ransomware. Detected by 58 antivirus engines. Linked to Playcrypt malware.

Detection summary

  • 58 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: PLAYCRYPT (S1162)

Intrusion sets: PLAY (G1040)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Play Triage 2026-03-11 11:42:22 2026-03-11 11:42:22 malicious-activity G1040 Play S1162 Playcrypt

Tags

play discovery ransomware

Sample information

Filenames
2026-03-11_b04d56a0662120c5f1fc3e34511b686d_amadey_elex_hellokitty_play
MD5
b04d56a0662120c5f1fc3e34511b686d
SHA-1
c89d14e4bda5ca6c7e0015cc10f6ce992c46f181
SHA-256
7fc2e416826ae0dd6d75f1020f0a2f0065d5a566e11a5858a8390de4702a1d94
SHA-512
cb8fc904423c15e2af79413f5198ef921a201df23708c633ffef759cf2fa81eda703e1efb356e0a935f2abe262421adbf018ba971abdc4844096cf0712a4c829
First indexed
2026-03-11 11:42:22
Last updated
2026-09-28 06:04:30

Antivirus detections

EngineDetection
ALYacGen:Variant.Trojan.Ransomware.924
APEXMalicious
AVGWin32:MalwareX-gen [Ransom]
AhnLab-V3Trojan/Win.Generic.C5217612
AlibabaRansom:Win32/MalwareX.f0fe9f82
Antiy-AVLTrojan[Ransom]/Win32.PLAY
ArcabitTrojan.Trojan.Ransomware.924
AvastWin32:MalwareX-gen [Ransom]
AviraTR/W32.MalwareX
BitDefenderGen:Variant.Trojan.Ransomware.924
BkavW32.Malware.4231F96B
CAT-QuickHealRansom.Play.S32038318
CTXexe.ransomware.play
ClamAVWin.Ransomware.Ransomware-10059712-0
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebTrojan.Encoder.35815
ESET-NOD32Win32/Filecoder.PLAY.A trojan
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Trojan.Ransomware.924 (B)
F-SecureTrojan.TR/W32.MalwareX
FortinetW32/Filecoder.PLAY!tr.ransom
GDataGen:Variant.Trojan.Ransomware.924
GoogleDetected
GridinsoftRansom.Win32.Filecoder.oa!s1
JiangminTrojan.Agent.eaqq
K7AntiVirusTrojan ( 000f224b1 )
K7GWTrojan ( 000f224b1 )
KasperskyTrojan-Ransom.Win32.Play.b
KingsoftWin32.Trojan-Ransom.Play.b
LionicTrojan.Win32.Play.j!c
MalwarebytesRansom.Play
McAfeeDti!7FC2E416826A
MicroWorld-eScanGen:Variant.Trojan.Ransomware.924
MicrosoftRansom:Win32/Play.E
NANO-AntivirusTrojan.Win32.Encoder.lgsswu
Paloaltogeneric.ml
PandaTrj/GdSda.A
RisingRansom.Agent!8.6B7 (TFE:5:pvkKOIjHEBK)
SangforRansom.Win32.Play.Vy9b
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TACHYONRansom/W32.Play.113152.D
TencentMalware.Win32.Gencirc.14aae488
TrellixENSGenericRXAA-AA!B04D56A06621
TrendMicroRansom.Win32.PLAYDE.SMYXCHKT
TrendMicro-HouseCallRansom.Win32.PLAYDE.SMYXCHKT
VBA32TrojanRansom.Play
VIPREGen:Variant.Trojan.Ransomware.924
VaristW32/Filecoder.UAIK-7857
VirITTrojan.Win32.GenusT.DYBX
WebrootW32.Ransomware.Gen
YandexTrojan.GenAsa!DS+xdKjbUw0
ZillyaTrojan.Agent.Win32.2828294
alibabacloudRansomware:Win/LockFile.GEA
huorongRansom/LockFile.gu