8c55958dc4f421350c0b0c5ac16004238f4d0957a7fba86832f7da76788a4804

Classification: Malicious

8c55958dc4f421350c0b0c5ac16004238f4d0957a7fba86832f7da76788a4804 is a ransomware (Windows executable, 166.0 KB). Linked to Revil malware.

Detection summary

  • 90 antivirus detections (86% detection ratio)
  • 0 IDS alerts
  • 3 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: REVIL (S0496)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-03-22 15:15:04 2023-03-22 15:15:04
DeepScan:Generic.Ransom.Sodinokibi Hybrid-Analysis 2020-02-25 22:15:12 2020-02-25 22:15:12 S0496 REvil

Sample information

Filenames
c3f14287cc4ca1c70e11dfe5afda7706, 8c55958dc4f421350c0b0c5ac16004238f4d0957a7fba86832f7da76788a4804.dll
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
169984 bytes
MD5
c3f14287cc4ca1c70e11dfe5afda7706
SHA-1
752b14561f5633cfcb3450c7627afb96c2cbd2e7
SHA-256
8c55958dc4f421350c0b0c5ac16004238f4d0957a7fba86832f7da76788a4804
First indexed
2020-02-25 22:15:12
Last updated
2026-10-16 05:14:17

Antivirus detections

EngineDetection
MicroWorld-eScanDeepScan:Generic.Ransom.Sodinokibi.AD18CDB6
FireEyeGeneric.mg.c3f14287cc4ca1c7
McAfeeGenericRXAA-AA!C3F14287CC4C
CylanceUnsafe
SangforMalware
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 0054d99c1 )
K7AntiVirusTrojan ( 0054d99c1 )
ArcabitDeepScan:Generic.Ransom.Sodinokibi.AD18CDB6
TrendMicroRansom.Win32.SODINOKIBI.SMTH
BitDefenderThetaAI:Packer.1A80B2361D
SymantecML.Attribute.HighConfidence
APEXMalicious
ClamAVWin.Ransomware.Sodinokibi-7013612-0
KasperskyTrojan-Ransom.Win32.Encoder.hfu
BitDefenderDeepScan:Generic.Ransom.Sodinokibi.AD18CDB6
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Malware-gen
RisingRansom.Encoder!8.FFD4 (RDMK:cmRtazr7CTepCCjpUl3kBHM9OgWw)
Ad-AwareDeepScan:Generic.Ransom.Sodinokibi.AD18CDB6
EmsisoftDeepScan:Generic.Ransom.Sodinokibi.AD18CDB6 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Ransom.cc
Trapminemalicious.high.ml.score
SentinelOneDFI - Malicious PE
JiangminTrojan.Gen.aqf
AviraTR/Crypt.XPACK.Gen
FortinetW32/Sodinokibi.B!tr.ransom
Antiy-AVLTrojan[Ransom]/Win32.Gen
Endgamemalicious (high confidence)
MicrosoftRansom:Win32/Sodinokibi.S!MSR
ZoneAlarmTrojan-Ransom.Win32.Encoder.hfu
ALYacDeepScan:Generic.Ransom.Sodinokibi.AD18CDB6
MAXmalware (ai score=82)
VBA32BScope.Trojan.DelShad
MalwarebytesRansom.Sodinokibi
ESET-NOD32a variant of Win32/Filecoder.Sodinokibi.B
TrendMicro-HouseCallRansom.Win32.SODINOKIBI.SMTH
IkarusTrojan-Ransom.Sodinokibi
GDataDeepScan:Generic.Ransom.Sodinokibi.AD18CDB6
AVGWin32:Malware-gen
PandaTrj/GdSda.A
Qihoo-360HEUR/QVM40.1.7DDD.Malware.Gen
ALYacTrojan.Ransom.Sodinokibi
AhnLab-V3Trojan/Win32.BlueCrab.R331768
AlibabaRansom:Win32/Revil.e0c1cd79
Antiy-AVLTrojan[Ransom]/Win32.Sodin
ArcabitTrojan.Ransom.Sodinokibi.366
BkavW32.Malware.2A6639
CTXdll.ransomware.sodinokibi
CrowdStrikewin/malicious_confidence_100% (W)
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebTrojan.Encoder.28004
ESET-NOD32Win32/Filecoder.Sodinokibi.D trojan
ElasticWindows.Ransomware.Sodinokibi
EmsisoftGen:Variant.Ransom.Sodinokibi.366 (B)
FortinetW32/Sodinokibi.D!tr.ransom
GDataGen:Variant.Ransom.Sodinokibi.366
GoogleDetected
GridinsoftRansom.Win32.Generic.oa!s1
K7AntiVirusRansomware ( 005f13291 )
K7GWRansomware ( 005f13291 )
Kingsoftmalware.kb.a.1000
LionicTrojan.Win32.Generic.n1H3
MalwarebytesCrypt.Trojan.Malicious.DDS
MaxSecureTrojan.Malware.74841888.susgen
McAfeeDti!8C55958DC4F4
MicroWorld-eScanGen:Variant.Ransom.Sodinokibi.366
MicrosoftRansom:Win32/Revil.A
Paloaltogeneric.ml
RisingRansom.Encoder!8.FFD4 (TFE:5:cn8NqNinrBK)
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
SangforRansom.Win32.Sodinokibi_1.se2
SentinelOneStatic AI - Malicious PE
SophosTroj/Sodino-BU
TACHYONRansom/W32.Sodinokibi.169984
TencentTrojan-Ransom.Win32.Sodin.ka
TrendMicro-HouseCallRansom.Win32.SODINOKIB.SMTH
VBA32BScope.TrojanRansom.Sodin
VIPREDump:Generic.Ransom.Sodinokibi.AD18CDB6
VaristW32/Filecoder.JG.gen!Eldorado
ViRobotTrojan.Win32.Z.Sodinokibi.169984.G
VirITTrojan.Win32.Encoder.BPLC
XcitiumMalware@#1cqvz13epqfve
YandexTrojan.GenAsa!TYq5HdjCl1A
ZoneAlarmTroj/Sodino-BU
alibabacloudRansomware:Win/Sodinokibi.B
huorongRansom/Sodinokibi.g

Process list

NameCommand line
regsvr32.exe/s "C:\c3f14287cc4ca1c70e11dfe5afda7706.dll"
<Ignored Process>
regsvr32.exe/s "C:\8c55958dc4f421350c0b0c5ac16004238f4d0957a7fba86832f7da76788a4804.dll"