9706a97ffa43a0258571def8912dc2b8bf1ee207676052ad1b9c16ca9953fc2c.exe

Classification: Malicious

9706a97ffa43a0258571def8912dc2b8bf1ee207676052ad1b9c16ca9953fc2c.exe is a malicious file sample. Linked to Ragnar Locker malware.

Detection summary

  • 59 antivirus detections
  • 0 IDS alerts
  • 4 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: RAGNAR LOCKER (S0481)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2025-08-15 20:00:04 2025-08-15 22:00:09
RagnarLocker Abuse.ch 2020-08-03 10:01:21 2020-08-03 10:01:21 S0481 Ragnar Locker

Tags

locker

Sample information

Filenames
9706a97ffa43a0258571def8912dc2b8bf1ee207676052ad1b9c16ca9953fc2c.exe, ragnar_locker
File type
application/x-dosexec
Size
38400 bytes
MD5
24b354b142b5046263e91170db92790b
SHA-1
bbb71391ca40bcebfaadf8e1367412333457d771
SHA-256
9706a97ffa43a0258571def8912dc2b8bf1ee207676052ad1b9c16ca9953fc2c
First indexed
2020-08-03 11:15:06
Last updated
2025-08-31 00:06:00

Antivirus detections

EngineDetection
BkavW32.AIDetectVM.malwareA
MicroWorld-eScanGeneric.Ransom.Ragnar.3.291525BF
FireEyeGeneric.mg.24b354b142b50462
CAT-QuickHealTrojanRansom.Agent
ALYacTrojan.Ransom.RagnarLocker
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 0055fb821 )
AlibabaTrojan:Win32/AntiAV.f8afe900
K7GWTrojan ( 0055fb821 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitGeneric.Ransom.Ragnar.3.291525BF
Invinceaheuristic
BitDefenderThetaAI:Packer.4DB54E2C1F
CyrenW32/Ransom.CYDG-8312
SymantecDownloader
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Exploit.CVE_2017_0213-6306933-0
KasperskyHEUR:Trojan-Ransom.Win32.Agent.gen
BitDefenderGeneric.Ransom.Ragnar.3.291525BF
NANO-AntivirusTrojan.Win32.Filecoder.hhfxtv
Paloaltogeneric.ml
AegisLabTrojan.Win32.Agent.j!c
RisingRansom.Agent!8.6B7 (CLOUD)
Ad-AwareGeneric.Ransom.Ragnar.3.291525BF
EmsisoftGeneric.Ransom.Ragnar.3.291525BF (B)
ComodoMalware@#iomg6ns48zfv
F-SecureHeuristic.HEUR/AGEN.1115159
DrWebTrojan.Encoder.31566
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win32.RAGNAR.SMA
McAfee-GW-EditionBehavesLike.Win32.Dropper.nh
Trapminemalicious.high.ml.score
SophosTroj/Lothlock-A
SentinelOneDFI - Malicious PE
JiangminTrojan.AntiAV.cac
AviraHEUR/AGEN.1115159
FortinetW32/AntiAV!tr
Antiy-AVLTrojan[Ransom]/Win32.Agent
Endgamemalicious (high confidence)
MicrosoftRansom:Win32/Ragnar!MSR
ViRobotTrojan.Win32.S.RagnarLocker.38400
ZoneAlarmHEUR:Trojan-Ransom.Win32.Agent.gen
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.RagnarRansom.C4121533
McAfeeGenericRXKJ-MB!24B354B142B5
MAXmalware (ai score=100)
VBA32Win32.Trojan.Cryptor.Heur
ESET-NOD32a variant of Win32/Filecoder.RagnarLocker.A
TrendMicro-HouseCallRansom.Win32.RAGNAR.SMA
TencentWin32.Trojan.Filecoder.Hrpb
YandexTrojan.AntiAV!oPvnXYZau44
IkarusTrojan-Ransom.Ragnarlocker
GDataWin32.Trojan-Ransom.Ragnar.A
MaxSecureTrojan.Malware.425.susgen
AVGWin32:RansomX-gen [Ransom]
PandaTrj/RansomCrypt.N
Qihoo-360Win32/Trojan.Anti.afe

Process list

NameCommand line
9706a97ffa43a0258571def8912dc2b8bf1ee207676052ad1b9c16ca9953fc2c.exe
WerFault.exe-u -p 4504 -s 632
WerFault.exe-u -p 4504 -s 632
WerFault.exe-pss -s 444 -p 4504 -ip 4504