dbug.exe

Classification: Malicious

dbug.exe is a ransomware (Windows executable, 136.5 KB). Flagged by 48% of antivirus engines (86 detections). Linked to Revil malware.

Detection summary

  • 86 antivirus detections (48% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: REVIL (S0496)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DeepScan:Generic.Ransom.Sodinokibi Hybrid-Analysis 2020-08-03 02:30:06 2020-08-03 02:30:06 S0496 REvil

Tags

ransomware

Sample information

Filenames
dbug.exe
File type
PE32 executable (console) Intel 80386, for MS Windows
Size
139776 bytes
MD5
c2ae29ea86b611d8697ca715e61045a8
SHA-1
58d835c3d204d012ee5a4e3c05a06e60b4316d0e
SHA-256
801e1f5f623edd2771367a79c94c8d9414f2d8f6af5cec707baa410a1ebf4b75
First indexed
2020-08-03 02:30:06
Last updated
2026-10-06 00:22:38

Antivirus detections

EngineDetection
MicroWorld-eScanDeepScan:Generic.Ransom.Sodinokibi.C1B07003
Qihoo-360HEUR/QVM20.1.FD0F.Malware.Gen
ALYacDeepScan:Generic.Ransom.Sodinokibi.C1B07003
CylanceUnsafe
ArcabitDeepScan:Generic.Ransom.Sodinokibi.C1B07003
TrendMicroRansom.Win32.SODINOKIB.SMTH
BitDefenderThetaGen:NN.ZexaF.34144.iuW@a8eE6Ke
CyrenW32/Kryptik.AKW.gen!Eldorado
SymantecRansom.Sodinokibi
ESET-NOD32a variant of Win32/Filecoder.Sodinokibi.B
APEXMalicious
ClamAVWin.Ransomware.Sodinokibi-7013612-0
BitDefenderDeepScan:Generic.Ransom.Sodinokibi.C1B07003
AvastWin32:Evo-gen [Susp]
RisingRansom.Sodin!8.10CD8 (TFE:dGZlOgJdQklLnaWFEQ)
Ad-AwareDeepScan:Generic.Ransom.Sodinokibi.C1B07003
EmsisoftDeepScan:Generic.Ransom.Sodinokibi.C1B07003 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
Invinceaheuristic
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.c2ae29ea86b611d8
IkarusTrojan-Ransom.Sodinokibi
F-ProtW32/Kryptik.AKW.gen!Eldorado
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=85)
Endgamemalicious (high confidence)
MicrosoftRansom:Win32/Sodinokibi.DSB!MTB
CynetMalicious (score: 100)
Acronissuspicious
VBA32BScope.Trojan.DelShad
TrendMicro-HouseCallRansom.Win32.SODINOKIB.SMTH
SentinelOneDFI - Suspicious PE
GDataDeepScan:Generic.Ransom.Sodinokibi.C1B07003
AVGWin32:Evo-gen [Susp]
Cybereasonmalicious.a86b61
ALYacTrojan.Ransom.Sodinokibi
AVGWin32:Sodinokibi-D [Ransom]
AhnLab-V3Malware/Win32.RL_Ransom.R361232
AlibabaRansom:Win32/REvil.4b9
Antiy-AVLTrojan[Ransom]/Win32.Sodin.vho
ArcabitTrojan.Ransom.Sodinokibi.351
AvastWin32:Sodinokibi-D [Ransom]
BitDefenderGen:Variant.Ransom.Sodinokibi.351
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.17584734501045a8
CTXexe.ransomware.sodinokibi
CrowdStrikewin/malicious_confidence_100% (W)
DeepInstinctMALICIOUS
DrWebTrojan.Encoder.28004
ESET-NOD32Win32/Filecoder.Sodinokibi.B trojan
ElasticWindows.Ransomware.Sodinokibi
EmsisoftGen:Variant.Ransom.Sodinokibi.351 (B)
FortinetW32/Filecoder_Sodinokibi.B!tr.ransom
GDataGen:Variant.Ransom.Sodinokibi.351
GoogleDetected
JiangminTrojan.Sodin.ba
K7AntiVirusTrojan ( 0054d99c1 )
K7GWRansomware ( 005ce66d1 )
KasperskyTrojan-Ransom.Win32.Sodin.zh
Kingsoftmalware.kb.a.949
LionicTrojan.Win32.Sodin.T!c
MalwarebytesCrypt.Trojan.Malicious.DDS
MaxSecureTrojan.Malware.74620497.susgen
McAfeeDti!801E1F5F623E
MicroWorld-eScanGen:Variant.Ransom.Sodinokibi.351
MicrosoftRansom:Win32/Revil.A
NANO-AntivirusTrojan.Win32.Sodin.hqkdfe
Paloaltogeneric.ml
PandaTrj/GdSda.A
RisingRansom.Sodinokibi!1.CB12 (CLASSIC)
SangforRansom.Win32.Sodinokibi_1.se2
SentinelOneStatic AI - Suspicious PE
SkyhighBehavesLike.Win32.Generic.ch
SophosMal/Generic-S
TACHYONRansom/W32.Sodinokibi.139776
TencentTrojan-Ransom.Win32.Sodinokibi.gen
TrellixENSSodinokibi!C2AE29EA86B6
TrendMicroRansom.Win32.SODINOKIBI.THDO
TrendMicro-HouseCallRansom.Win32.SODINOKIBI.THDO
VBA32BScope.TrojanRansom.Sodin
VIPREGen:Variant.Ransom.Sodinokibi.351
VaristW32/Kryptik.AKW.gen!Eldorado
YandexTrojan.Filecoder!BSRb57qasLI
ZoneAlarmTroj/Sodino-BW
alibabacloudRansomWare:Win/Sodinokibi
huorongRansom/Sodinokibi.g

Process list

NameCommand line
dbug.exe
powershell.exepowershell -e RwBlAHQALQBXAG0AaQBPAGIAagBlAGMAdAAgAFcAaQBuADMAMgBfAFMAaABhAGQAbwB3AGMAbwBwAHkAIAB8ACAARgBvAHIARQBhAGMAaAAtAE8AYgBqAGUAYwB0ACAAewAkAF8ALgBEAGUAbABlAHQAZQAoACkAOwB9AA==