8b5ccd10362353e7fc250188505b369f56904decf97719a6ba9ae9c6256f07ff

Classification: Malicious

8b5ccd10362353e7fc250188505b369f56904decf97719a6ba9ae9c6256f07ff is a ransomware (Windows executable, 115.5 KB). Linked to Revil malware.

Detection summary

  • 95 antivirus detections (60% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: REVIL (S0496)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DeepScan:Generic.Ransom.Sodinokibi Hybrid-Analysis 2020-05-12 15:30:04 2020-05-12 15:30:04 S0496 REvil

Tags

ransomware

Sample information

Filenames
d259da118d8670f47f2dc3c86dad4d8c
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
118272 bytes
MD5
d259da118d8670f47f2dc3c86dad4d8c
SHA-1
86a80a1379994a1af1b6ec6a6858405ff617bed4
SHA-256
8b5ccd10362353e7fc250188505b369f56904decf97719a6ba9ae9c6256f07ff
First indexed
2020-05-12 15:30:04
Last updated
2026-10-03 01:03:35

Antivirus detections

EngineDetection
MicroWorld-eScanDeepScan:Generic.Ransom.Sodinokibi.FE9FF902
McAfeeRansom-Sodnkibi!D259DA118D86
CylanceUnsafe
AlibabaRansom:Win32/Sodinokibi.c71d9ed9
Cybereasonmalicious.18d867
ArcabitDeepScan:Generic.Ransom.Sodinokibi.FE9FF902
Invinceaheuristic
BitDefenderThetaAI:Packer.59A870CF1E
F-ProtW32/Kryptik.AKW.gen!Eldorado
SymantecRansom.Sodinokibi
ESET-NOD32a variant of Win32/Filecoder.Sodinokibi.B
APEXMalicious
AvastWin32:Evo-gen [Susp]
ClamAVWin.Ransomware.Sodinokibi-7013612-0
KasperskyHEUR:Trojan-Ransom.Win32.Gen.gen
BitDefenderDeepScan:Generic.Ransom.Sodinokibi.FE9FF902
NANO-AntivirusVirus.Win32.Gen.ccmw
RisingRansom.Sodin!8.10CD8 (TFE:dGZlOgJdQklLnaWFEQ)
Endgamemalicious (high confidence)
F-SecureTrojan.TR/Crypt.XPACK.Gen
TrendMicroRansom.Win32.SODINOKIB.SMTH
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.d259da118d8670f4
EmsisoftDeepScan:Generic.Ransom.Sodinokibi.FE9FF902 (B)
SentinelOneDFI - Malicious PE
CyrenW32/Kryptik.AKW.gen!Eldorado
AviraTR/Crypt.XPACK.Gen
MicrosoftRansom:Win32/Sodinokibi.S!MSR
AegisLabTrojan.Win32.Gen.j!c
ZoneAlarmHEUR:Trojan-Ransom.Win32.Gen.gen
GDataDeepScan:Generic.Ransom.Sodinokibi.FE9FF902
AhnLab-V3Trojan/Win32.RL_Ransom.R290570
Acronissuspicious
VBA32BScope.Trojan.DelShad
ALYacDeepScan:Generic.Ransom.Sodinokibi.FE9FF902
Ad-AwareDeepScan:Generic.Ransom.Sodinokibi.FE9FF902
TrendMicro-HouseCallRansom.Win32.SODINOKIB.SMTH
IkarusTrojan-Ransom.Sodinokibi
FortinetW32/Sodinokibi.B!tr.ransom
AVGWin32:Evo-gen [Susp]
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360HEUR/QVM20.1.2D5E.Malware.Gen
ALYacTrojan.Ransom.Sodinokibi
AVGWin32:CVE-2018-8453-L [Expl]
AlibabaRansom:Win32/Sodin.b84d5ce8
Antiy-AVLTrojan[Ransom]/Win32.Sodinokibi
ArcabitTrojan.Ransom.Sodinokibi.46
AvastWin32:CVE-2018-8453-L [Expl]
BitDefenderGen:Variant.Ransom.Sodinokibi.46
BkavW32.AIDetectMalware
CAT-QuickHealRansom.Revil.S28112634
CTXexe.ransomware.sodinokibi
CrowdStrikewin/malicious_confidence_100% (W)
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebTrojan.Encoder.28004
ElasticWindows.Ransomware.Sodinokibi
EmsisoftGen:Variant.Ransom.Sodinokibi.46 (B)
FortinetW32/Sodinokibi.D!tr.ransom
GDataGen:Variant.Ransom.Sodinokibi.46
GoogleDetected
GridinsoftRansom.Win32.Gen.oa!s1
K7AntiVirusTrojan ( 0054f2831 )
K7GWTrojan ( 0054f2831 )
KasperskyTrojan-Ransom.Win32.Sodin.abb
Kingsoftmalware.kb.a.1000
LionicTrojan.Win32.Sodin.trMK
MalwarebytesCrypt.Trojan.Malicious.DDS
MaxSecureTrojan.Malware.74279478.susgen
McAfeeDReal Protect-LS!D259DA118D86
MicroWorld-eScanGen:Variant.Ransom.Sodinokibi.46
MicrosoftRansom:Win32/Revil.A
Paloaltogeneric.ml
PandaTrj/CI.A
RisingRansom.Sodin!8.10CD8 (TFE:2:tgu5Cp8rQfB)
SUPERAntiSpywareTrojan.Agent/Gen-Sodinokibi
SangforRansom.Win32.Sodinokibi_1.se2
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Downloader.ch
SophosTroj/Sodino-BU
TACHYONRansom/W32.Sodinokibi.118272.C
TencentTrojan-Ransom.Win32.Sodinokibi.gen
Trapminemalicious.high.ml.score
TrendMicroRansom.Win32.SODINOKIB.SMZTIC-B
VBA32BScope.TrojanRansom.Sodin
VIPREGen:Variant.Ransom.Sodinokibi.46
VaristW32/Kryptik.AKW.gen!Eldorado
ViRobotTrojan.Win32.Ransom.118272.B
WebrootW32.Ransom.Sodinokibi
XcitiumMalware@#yr0ng6u4mxr0
YandexTrojan.Filecoder!D4ko3vclm2c
ZillyaTrojan.Filecoder.Win32.14505
alibabacloudRansomware:Win/Sodinokibi.B
huorongRansom/Sodinokibi.g

Process list

NameCommand line
d259da118d8670f47f2dc3c86dad4d8c.exe