9e0e76d6a2586fbe94a407a8bf5b3e336ca2e8645ab26eab814b707fac2c25a5

Classification: Malicious

9e0e76d6a2586fbe94a407a8bf5b3e336ca2e8645ab26eab814b707fac2c25a5 is a ransomware (Windows executable, 166.5 KB). Linked to Revil malware.

Detection summary

  • 100 antivirus detections (72% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: REVIL (S0496)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DeepScan:Generic.Ransom.Sodinokibi Hybrid-Analysis 2020-05-05 13:30:15 2020-05-05 13:30:15 S0496 REvil

Tags

ransomware

Sample information

Filenames
35d4a9db3975637f6da4a2c39fb66a6e
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
170496 bytes
MD5
35d4a9db3975637f6da4a2c39fb66a6e
SHA-1
e75ee9b75349e77ba2478e2ffaa23142b6c4bba4
SHA-256
9e0e76d6a2586fbe94a407a8bf5b3e336ca2e8645ab26eab814b707fac2c25a5
First indexed
2020-05-05 13:30:15
Last updated
2026-09-28 23:36:55

Antivirus detections

EngineDetection
MicroWorld-eScanDeepScan:Generic.Ransom.Sodinokibi.9C89485B
FireEyeGeneric.mg.35d4a9db3975637f
CAT-QuickHealTrojan.IgenericRI.S11639327
McAfeeSodinokibi!35D4A9DB3975
CylanceUnsafe
ZillyaTrojan.Filecoder.Win32.12876
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 005628301 )
K7AntiVirusTrojan ( 005628301 )
ArcabitDeepScan:Generic.Ransom.Sodinokibi.9C89485B
Invinceaheuristic
F-ProtW32/Kryptik.AKW.gen!Eldorado
SymantecRansom.Sodinokibi
APEXMalicious
ClamAVWin.Ransomware.Sodinokibi-7013612-0
KasperskyHEUR:Trojan-Ransom.Win32.Crypmod.vho
BitDefenderDeepScan:Generic.Ransom.Sodinokibi.9C89485B
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Trojan-gen
RisingRansom.Encoder!8.FFD4 (RDMK:cmRtazoig34z6+/bmRrOPQH0YulF)
Ad-AwareDeepScan:Generic.Ransom.Sodinokibi.9C89485B
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.Encoder.28004
TrendMicroRansom.Win32.SODINOKIBI.SMTH
McAfee-GW-EditionBehavesLike.Win32.Ransom.cc
EmsisoftDeepScan:Generic.Ransom.Sodinokibi.9C89485B (B)
SentinelOneDFI - Malicious PE
CyrenW32/Kryptik.AKW.gen!Eldorado
JiangminTrojan.Crypmod.xi
AviraTR/Crypt.XPACK.Gen
FortinetW32/Sodinokibi.B!tr.ransom
Antiy-AVLTrojan[Ransom]/Win32.Crypmod
Endgamemalicious (high confidence)
MicrosoftRansom:Win32/Sodinokibi.S!MSR
ZoneAlarmHEUR:Trojan-Ransom.Win32.Crypmod.vho
AhnLab-V3Malware/Win32.Ransom.C4046296
Acronissuspicious
ALYacDeepScan:Generic.Ransom.Sodinokibi.9C89485B
MAXmalware (ai score=82)
VBA32BScope.Trojan.DelShad
MalwarebytesRansom.Sodinokibi
ESET-NOD32a variant of Win32/Filecoder.Sodinokibi.D
TrendMicro-HouseCallRansom.Win32.SODINOKIBI.SMTH
TencentMalware.Win32.Gencirc.10b91bd4
YandexTrojan.Filecoder!pwcGBVezH2c
IkarusTrojan-Ransom.Sodinokibi
eGambitUnsafe.AI_Score_79%
GDataDeepScan:Generic.Ransom.Sodinokibi.9C89485B
BitDefenderThetaAI:Packer.3982A8CB1E
AVGWin32:Trojan-gen
PandaTrj/GdSda.A
Qihoo-360HEUR/QVM40.1.057C.Malware.Gen
ALYacTrojan.Ransom.Sodinokibi
AVGWin32:CVE-2018-8453-C [Expl]
AhnLab-V3Malware/Win32.Ransom.R360962
AlibabaRansom:Win32/Revil.636cc3da
Antiy-AVLTrojan[Ransom]/Win32.Sodinokibi
ArcabitDump:Generic.Ransom.Sodinokibi.9C89485B
AvastWin32:CVE-2018-8453-C [Expl]
BitDefenderDump:Generic.Ransom.Sodinokibi.9C89485B
BkavW32.AIDetectMalware
CAT-QuickHealRansom.Revil.S28288303
CTXdll.ransomware.sodinokibi
CrowdStrikewin/malicious_confidence_100% (W)
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
ElasticWindows.Ransomware.Sodinokibi
EmsisoftDump:Generic.Ransom.Sodinokibi.9C89485B (B)
FortinetW32/Sodinokibi.D!tr.ransom
GDataDump:Generic.Ransom.Sodinokibi.9C89485B
GoogleDetected
GridinsoftRansom.Win32.Generic.oa!s1
K7AntiVirusTrojan ( 00575a451 )
K7GWTrojan ( 00575a451 )
KasperskyHEUR:Trojan-Ransom.Win32.Sodin.vho
KingsoftWin32.Trojan-Ransom.Generic.a
LionicTrojan.Win32.Sodinokibi.j!c
MaxSecureTrojan.Malware.74705118.susgen
McAfeeDReal Protect-LS!35D4A9DB3975
MicroWorld-eScanDump:Generic.Ransom.Sodinokibi.9C89485B
MicrosoftRansom:Win32/Revil.A
Paloaltogeneric.ml
PandaTrj/Genetic.gen
RisingRansom.Encoder!8.FFD4 (TFE:5:cn8NqNinrBK)
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
SangforRansom.Win32.Sodinokibi_1.se2
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Sality.cc
SophosTroj/Sodino-BU
SymantecML.Attribute.HighConfidence
TencentTrojan-Ransom.Win32.Sodin.ha
TrendMicroRansom.Win32.SODINOKIB.SMTH
TrendMicro-HouseCallRansom.Win32.SODINOKIB.SMTH
VBA32BScope.TrojanRansom.Sodin
VIPREDump:Generic.Ransom.Sodinokibi.9C89485B
VaristW32/Filecoder.JG.gen!Eldorado
XcitiumMalware@#32f4221k3mzh6
ZoneAlarmTroj/Sodino-BU
alibabacloudRansomware:Win/Sodinokibi.B
huorongRansom/Sodinokibi.g

Process list

NameCommand line
regsvr32.exe/s "C:\35d4a9db3975637f6da4a2c39fb66a6e.dll"