2026-03-14_88d262a7804ea887d71f82edb607200f_clop_elex_remcos
Classification: Malicious
2026-03-14_88d262a7804ea887d71f82edb607200f_clop_elex_remcos is a malicious file sample. Linked to Clop malware. Detected by 57 antivirus engines.
Detection summary
- 57 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CLOP (S0611)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Clop | Triage | 2026-03-14 06:44:20 | 2026-03-14 06:44:20 | malicious-activity | S0611 Clop |
Tags
clop discoverySample information
- Filenames
- 2026-03-14_88d262a7804ea887d71f82edb607200f_clop_elex_remcos
- MD5
88d262a7804ea887d71f82edb607200f- SHA-1
df9924869f6bb6ab900dc5aaeedef86bdf7babe4- SHA-256
9d60f6dab9fc4e5a73958b6935d676c3a6cc75079b1d03bc493ddd73cdbff4c6- SHA-512
5300a03c2f2dd32616b0a04682ae5f01185a525651b17d569add2de383e16e47a3fbccec6709dce0c897c0d2abbe8c3e038b033c61af508b9d841d37c4c1d006- First indexed
- 2026-03-14 06:44:20
- Last updated
- 2026-03-14 06:44:20
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Trojan.Ransomware.880 |
| AVG | Win32:Trojan-gen |
| AhnLab-V3 | Malware/Win32.Generic.C4363391 |
| Alibaba | Ransom:Win32/Generic.bdddf6f5 |
| Antiy-AVL | Trojan[Ransom]/Win32.Clop.gen |
| Arcabit | Trojan.Trojan.Ransomware.880 |
| Avast | Win32:Trojan-gen |
| Avira | HEUR/AGEN.1375047 |
| BitDefender | Gen:Variant.Trojan.Ransomware.880 |
| CAT-QuickHeal | Ransom.Clop.S30657848 |
| CTX | exe.ransomware.clop |
| ClamAV | Win.Ransomware.Ransomware-10059712-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.33639 |
| ESET-NOD32 | Win32/Filecoder.Cl0p.F trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Trojan.Ransomware.880 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1375047 |
| Fortinet | W32/HydraCrypt.S!tr.ransom |
| GData | Gen:Variant.Trojan.Ransomware.880 |
| Detected | |
| Gridinsoft | Trojan.Win32.Wacatac.oa!s1 |
| Ikarus | Trojan-Ransom.Cl0p |
| Jiangmin | Trojan.KlopRansom.am |
| K7AntiVirus | Ransomware ( 005f5ff21 ) |
| K7GW | Ransomware ( 005f5ff21 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Agent.gen |
| Kingsoft | Win32.Trojan-Ransom.KlopRansom.vho |
| Lionic | Trojan.Win32.Clop.j!c |
| Malwarebytes | Malware.AI.1274435455 |
| McAfeeD | Real Protect-LS!88D262A7804E |
| MicroWorld-eScan | Gen:Variant.Trojan.Ransomware.880 |
| Microsoft | Ransom:Win32/Clop.LKV!MTB |
| NANO-Antivirus | Trojan.Win32.KlopRansom.ioccie |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Cl0p!8.188A5 (TFE:5:Mobx5bLqtHN) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.NetLoader.dh |
| Sophos | Mal/Generic-S |
| Tencent | Malware.Win32.Gencirc.14aae391 |
| Trapmine | suspicious.low.ml.score |
| TrellixENS | GenericRXNP-IR!88D262A7804E |
| TrendMicro | Ransom.Win32.CLOP.SMYXCIH |
| TrendMicro-HouseCall | Ransom.Win32.CLOP.SMYXCIH |
| VBA32 | TrojanRansom.KlopRansom |
| VIPRE | Gen:Variant.Trojan.Ransomware.880 |
| Varist | W32/Filecoder.IR.gen!Eldorado |
| ViRobot | Trojan.Win32.ClopRansom.231424 |
| Yandex | Trojan.Filecoder!mvH7Q2gfdb4 |
| Zillya | Trojan.FileCoder.Win32.6 |
| alibabacloud | Ransomware:Win/Cl0p.07e96903 |
| huorong | Ransom/Filecoder.cs |