88b1b4966650de59cef20c340b28739c52dc9ead91d9959a338a8e531ad38335.exe

Classification: Malicious

88b1b4966650de59cef20c340b28739c52dc9ead91d9959a338a8e531ad38335.exe is a malicious file sample. Linked to Ryuk malware. Detected by 95 antivirus engines.

Detection summary

  • 95 antivirus detections (78% detection ratio)
  • 0 IDS alerts
  • 4 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: RYUK (S0446)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-06-29 03:21:58 2023-06-29 03:21:58
Ryuk Abuse.ch 2021-01-18 11:44:07 2021-01-18 11:44:07 malicious-activity S0446 Ryuk

Tags

agenttesla banker betabot bladabindi coinminer dofoil gozi infostealer isfb lokibot nanocore netwire njrat papras qakbot rat sharik smokeloader trojan ursnif

Sample information

Filenames
88b1b4966650de59cef20c340b28739c52dc9ead91d9959a338a8e531ad38335.exe, 88b1b4966650de59cef20c340b28739c52dc9ead91d9959a338a8e531ad38335
File type
application/x-dosexec
Size
589312 bytes
MD5
6cad2f7dc809b9353a31753a438aef4e
SHA-1
459d816bb020f5da8257076a36d0ffd1f1f02d76
SHA-256
88b1b4966650de59cef20c340b28739c52dc9ead91d9959a338a8e531ad38335
First indexed
2021-01-18 14:15:11
Last updated
2025-09-23 00:19:08

Antivirus detections

EngineDetection
BkavW32.AIDetect.malware1
LionicHeuristic.File.Generic.00x1!p
MicroWorld-eScanGen:Trojan.Heur.FU.JqW@ay9OZ0
FireEyeGeneric.mg.6cad2f7dc809b935
ALYacTrojan.Ransom.Ryuk
MalwarebytesMalware.AI.3115121320
ZillyaTrojan.Agent.Win32.1679652
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/Generic.ae342257
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
CyrenW32/Ryuk.B.gen!Eldorado
SymantecTrojan Horse
Elasticmalicious (high confidence)
APEXMalicious
KasperskyHEUR:Trojan-Ransom.Win32.Agent.gen
BitDefenderGen:Trojan.Heur.FU.JqW@ay9OZ0
NANO-AntivirusTrojan.Win32.Encoder.ipzjat
AvastWin32:Ryuk-A [Trj]
Rising[email protected] (RDML:+a6LYod/DQlwMGfkAxkWPw)
Ad-AwareGen:Trojan.Heur.FU.JqW@ay9OZ0
EmsisoftGen:Trojan.Heur.FU.JqW@ay9OZ0 (B)
ComodoMalware@#ey3jn44upf7z
DrWebTrojan.Encoder.33387
VIPREGen:Trojan.Heur.FU.JqW@ay9OZ0
TrendMicroTROJ_FRS.0NA103F421
McAfee-GW-EditionArtemis!Trojan
Trapminemalicious.high.ml.score
SophosML/PE-A
SentinelOneStatic AI - Malicious PE
GDataGen:Trojan.Heur.FU.JqW@ay9OZ0
WebrootW32.Trojan.Gen
GoogleDetected
AviraHEUR/AGEN.1213034
MAXmalware (ai score=94)
Antiy-AVLTrojan/Generic.ASMalwS.C78
KingsoftWin32.Heur.KVMH008.a.(kcloud)
GridinsoftRansom.Win32.Gen.oa!s1
ArcabitTrojan.Heur.FU.E6A2CD
MicrosoftRansom:Win32/Ruyk.A!ibt
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.Generic.C4301578
McAfeeArtemis!6CAD2F7DC809
TACHYONRansom/W32.Ryuk.589312
VBA32BScope.Trojan.Diple
CylanceUnsafe
TrendMicro-HouseCallTROJ_FRS.0NA103F421
TencentWin32.Trojan.Agent.Wsav
IkarusTrojan-Ransom.Ryuk
MaxSecureTrojan.Malware.82199810.susgen
BitDefenderThetaAI:Packer.0B10192B1D
AVGWin32:Ryuk-A [Trj]
Cybereasonmalicious.dc809b
PandaTrj/GdSda.A
BkavW32.AIDetectVM.malware1
CAT-QuickHealTrojan.Multi
McAfeeRDN/Ransom
SangforMalware
AlibabaRansom:Win32/Generic.4acc2fb9
CrowdStrikewin/malicious_confidence_100% (D)
SymantecML.Attribute.HighConfidence
KasperskyUDS:DangerousObject.Multi.Generic
F-SecureHeuristic.HEUR/AGEN.1127994
TrendMicroRansom_Ruyk.R002C0DAG21
McAfee-GW-EditionBehavesLike.Win32.Generic.hh
AviraHEUR/AGEN.1127994
AegisLabTrojan.Multi.Generic.4!c
ZoneAlarmUDS:DangerousObject.Multi.Generic
ALYacGen:Trojan.Heur.FU.JqW@ay9OZ0
MAXmalware (ai score=86)
TrendMicro-HouseCallRansom_Ruyk.R002C0DAG21
Rising[email protected] (RDMK:e+1rwVWNGytMt8DhUnMxwQ)
eGambitUnsafe.AI_Score_87%
FortinetW32/Ransom!tr
Qihoo-360Generic/HEUR/QVM10.2.AD5B.Malware.Gen
Antiy-AVLTrojan[Ransom]/Win32.Agent
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.17025028148aef4e
CTXexe.trojan.ryuk
DeepInstinctMALICIOUS
FortinetW32/Ryuk.A!tr.ransom
Kingsoftmalware.kb.a.1000
LionicTrojan.Win32.Ryuk.j!c
McAfeeDReal Protect-LS!6CAD2F7DC809
Paloaltogeneric.ml
Rising[email protected] (RDML:+a6LYod/DQlwMGfkAxkWPw)
SkyhighBehavesLike.Win32.Infected.hh
SophosMal/Generic-S
SymantecRansom.Ryuk
TencentMalware.Win32.Gencirc.10be4fa5
VaristW32/Ryuk.B.gen!Eldorado
XcitiumMalware@#ey3jn44upf7z
alibabacloudRansomware:Win/Agent.gen
huorongTrojan/Generic!B05F8D4A5FEC8F10

Process list

NameCommand line
88b1b4966650de59cef20c340b28739c52dc9ead91d9959a338a8e531ad38335.exe
icacls.exeicacls "C:\*" /grant Everyone:F /T /C /Q
icacls.exeicacls "D:\*" /grant Everyone:F /T /C /Q
icacls.exeicacls "Z:\*" /grant Everyone:F /T /C /Q