af0e24781ed3683f04dd86a616e31490f36c2da4cbb4fddc76efbd0fc4f15d55

Classification: Malicious

af0e24781ed3683f04dd86a616e31490f36c2da4cbb4fddc76efbd0fc4f15d55 is a ransomware (Windows executable, 3.1 MB). Detected by 70 antivirus engines.

Detection summary

  • 70 antivirus detections
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CHAOS (S0220)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-11-01 22:00:04 2026-09-07 09:45:03 malicious-activity
Chaos MalwareBazaar Abuse.ch 2024-11-01 21:31:31 2024-11-01 21:31:31 malicious-activity S0220 Chaos

Tags

ransomware

Sample information

Filenames
af0e24781ed3683f04dd86a616e31490f36c2da4cbb4fddc76efbd0fc4f15d55
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
3201024 bytes
MD5
3303698d5190201a3f6dd7f1118251e0
SHA-1
b7ef2c81d6ae8023ff811278ec3e5bfba8fd905d
SHA-256
af0e24781ed3683f04dd86a616e31490f36c2da4cbb4fddc76efbd0fc4f15d55
First indexed
2024-11-01 21:32:38
Last updated
2026-09-07 09:45:04

Antivirus detections

EngineDetection
ALYacGeneric.Ransom.HydraCrypt.4D964E11
APEXMalicious
AVGWin32:RansomX-gen [Ransom]
AhnLab-V3Malware/Win.Generic.C4581699
ArcabitGeneric.Ransom.HydraCrypt.4D964E11
AvastWin32:RansomX-gen [Ransom]
AviraHEUR/AGEN.1370958
BitDefenderGeneric.Ransom.HydraCrypt.4D964E11
BkavW32.AIDetectMalware.CS
CAT-QuickHealTrojan.MsilFC.S23210427
CTXexe.ransomware.hydracrypt
ClamAVWin.Ransomware.Hydracrypt-9878672-0
CrowdStrikewin/malicious_confidence_100% (D)
CylanceUnsafe
DeepInstinctMALICIOUS
DrWebTrojan.Encoder.34437
ESET-NOD32a variant of MSIL/Filecoder.Chaos.A
Elasticmalicious (high confidence)
EmsisoftGeneric.Ransom.HydraCrypt.4D964E11 (B)
F-SecureHeuristic.HEUR/AGEN.1370958
FireEyeGeneric.mg.3303698d5190201a
FortinetMSIL/Filecoder.8878!tr.ransom
GDataMSIL.Trojan-Ransom.Remind.B
GoogleDetected
IkarusTrojan.Filecrypter.Chaos
K7AntiVirusRansomware ( 005a8b921 )
K7GWRansomware ( 005a8b921 )
KasperskyHEUR:Trojan-Ransom.Win32.Generic
MalwarebytesGeneric.Malware.AI.DDS
MaxSecureTrojan.Malware.300983.susgen
McAfeeGenericRXQG-EP!3303698D5190
McAfeeDReal Protect-LS!3303698D5190
MicroWorld-eScanGeneric.Ransom.HydraCrypt.4D964E11
MicrosoftRansom:MSIL/FileCoder.AD!MTB
RisingRansom.Destructor!1.B060 (CLASSIC)
SentinelOneStatic AI - Malicious PE
SkyhighGenericRXQG-EP!3303698D5190
SophosTroj/Ransom-GWT
SymantecRansom.Sorry
TencentTrojan-Ransom.Msil.Agent.ga
VBA32Trojan.MSIL.DelShad.Heur
VIPREGeneric.Ransom.HydraCrypt.4D964E11
VaristW32/Filecoder.IY.gen!Eldorado
VirITTrojan.Win32.MSIL_Heur.A
ZoneAlarmHEUR:Trojan-Ransom.Win32.Generic
huorongRansom/BTCware.d
ALYacTrojan.Ransom.Filecoder
AVGWin32:MalwareX-gen [Ransom]
AlibabaRansom:MSIL/FileCoder.d2e2dc3e
ArcabitTrojan.Generic.D474C665
AvastWin32:MalwareX-gen [Ransom]
BitDefenderTrojan.GenericKD.74761829
CTXexe.trojan.msil
CrowdStrikewin/malicious_confidence_100% (W)
EmsisoftTrojan.GenericKD.74761829 (B)
IkarusTrojan-Ransom.Chaos
KingsoftWin32.Trojan-Ransom.Generic.a
LionicTrojan.Win32.Generic.j!c
MicroWorld-eScanTrojan.GenericKD.74761829
NANO-AntivirusTrojan.Win32.Filecoder.ktflrp
Paloaltogeneric.ml
PandaTrj/GdSda.A
SangforSuspicious.Win32.Save.a
SkyhighBehavesLike.Win32.Generic.wt
TrellixENSGenericRXQG-EP!3303698D5190
TrendMicro-HouseCallTrojan.Win32.VSX.PE04C9j
VIPRETrojan.GenericKD.74761829
ZillyaTrojan.Filecoder.Win32.37082
ZoneAlarmTroj/Ransom-GWT
alibabacloudTrojan:MSIL/ClipBanker.MO

Process list

NameCommand line
af0e24781ed3683f04dd86a616e31490f36c2da4cbb4fddc76efbd0fc4f15d55.exe
svchost.exe