sub_9b86a50b36ae.bin
Classification: Malicious
sub_9b86a50b36ae.bin is a malicious file sample. Linked to Ryuk malware. Reported by 1 threat source, last seen 2026-05-24. Detected by 58 antivirus engines.
Detection summary
- 58 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: RYUK (S0446)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ryuk | Triage | 2026-05-24 01:28:12 | 2026-05-24 01:28:12 | malicious-activity | S0446 Ryuk |
Tags
ryuk defense_evasion discovery execution impact persistence ransomwareSample information
- Filenames
- sub_9b86a50b36ae.bin
- SHA-256
9b86a50b36aea5cc4cb60573a3660cf799a9ec1f69a3d4572d3dc277361a0ad2- First indexed
- 2026-05-24 01:28:12
- Last updated
- 2026-05-24 01:28:12
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Ransom.Ryuk |
| AVG | Win64:Filecoder-A [Ransom] |
| AhnLab-V3 | Trojan/Win64.Ryukran.R234812 |
| Alibaba | Ransom:Win32/Filecoder.812a4981 |
| Antiy-AVL | Trojan/Win64.Ryuk |
| Arcabit | Trojan.Ransom.Ryuk.A |
| Avast | Win64:Filecoder-A [Ransom] |
| Avira | TR/Redcap.mngog |
| BitDefender | Trojan.Ransom.Ryuk.A |
| Bkav | W32.Malware.3BAE2D14 |
| CTX | exe.trojan.ryuk |
| ClamAV | Win.Ransomware.Ryuk-6688842-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.28315 |
| ESET-NOD32 | Win64/Filecoder.T trojan |
| Elastic | Windows.Ransomware.Ryuk |
| Emsisoft | Trojan.Ransom.Ryuk.A (B) |
| F-Secure | Trojan.TR/Redcap.mngog |
| Fortinet | W64/Filecoder.T!tr |
| GData | Win64.Trojan-Ransom.Ryuk.A |
| Detected | |
| Gridinsoft | Ransom.Win64.Generic.oa!s1 |
| Ikarus | Trojan-Ransom.Ryuk |
| Jiangmin | Trojan.Hermez.r |
| K7AntiVirus | Ransomware ( 005d64b41 ) |
| K7GW | Ransomware ( 005d64b41 ) |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| Kingsoft | Win32.Trojan.Generic.a |
| Lionic | Trojan.Win32.Ryuk.4!c |
| Malwarebytes | Malware.AI.3885811442 |
| McAfeeD | ti!9B86A50B36AE |
| MicroWorld-eScan | Trojan.Ransom.Ryuk.A |
| Microsoft | Ransom:Win32/Ryuk!MSR |
| NANO-Antivirus | Trojan.Win64.Hermez.fhvfde |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Ransom.Jabaxsta!1.B3AA (CLASSIC) |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win64.Injector.ch |
| Sophos | Troj/Ransom-FAF |
| TACHYON | Ransom/W64.Ryuk.178688 |
| Tencent | Malware.Win32.Gencirc.10bde981 |
| Trapmine | malicious.moderate.ml.score |
| TrellixENS | Ransom-Ryuk |
| TrendMicro-HouseCall | Ransom_RYUK.THHBAAO |
| VBA32 | TrojanRansom.Hermez |
| VIPRE | Trojan.Ransom.Ryuk.A |
| Varist | W64/Ransom.Ryuk.A.gen!Eldorado |
| ViRobot | Trojan.Win64.S.Ryuk.178688 |
| Xcitium | Malware@#2z8hd4qqk7ak |
| Yandex | Trojan.GenAsa!IN2Q8puX4gM |
| ZoneAlarm | Troj/Ransom-FAF |
| alibabacloud | RansomWare |
| huorong | Ransom/LockFile.af |