LithiumWareV2.exe.infected
Classification: Malicious
LithiumWareV2.exe.infected is a ransomware. Detected by 55 antivirus engines. Linked to Chaos malware. Reported by Triage, last seen 2026-02-24.
Detection summary
- 55 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CHAOS (S0220)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Chaos | Triage | 2026-02-24 14:17:07 | 2026-02-24 14:17:07 | malicious-activity | S0220 Chaos |
Tags
chaos wannacry defense_evasion evasion execution impact persistence ransomware spyware stealer wormSample information
- Filenames
- LithiumWareV2.exe.infected
- MD5
3bcb06bfd037d20132b11c49f21940e5- SHA-1
90b36f6a8da347ec2629675cf07698329d286570- SHA-256
b2f188b9e27d4a877e506457667a97c39f6805a597fceb1dc729e6a3f2cf6639- SHA-512
ad540e1f66dc86a8cb2906ec042f266c39e7264935a42a11da08a17e765e1e93b7867e1b7339e8508bfd6ce41468fad65598c149bf19f7de20163e93c71ad277- First indexed
- 2026-02-24 14:17:07
- Last updated
- 2026-09-19 00:17:07
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Generic.Ransom.HydraCrypt.DC800C35 |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Ransom] |
| AhnLab-V3 | Ransomware/Win.FTD.C4580181 |
| Alibaba | Ransom:MSIL/FileCoder.13687357 |
| Antiy-AVL | Trojan[Ransom]/MSIL.Filecoder |
| Arcabit | Generic.Ransom.HydraCrypt.DC800C35 |
| Avast | Win32:MalwareX-gen [Ransom] |
| Avira | TR/W32.MalwareX |
| BitDefender | Generic.Ransom.HydraCrypt.DC800C35 |
| Bkav | W32.Malware.A876AD0E |
| CAT-QuickHeal | Trojan.MsilFC.S23210427 |
| CTX | exe.trojan.msil |
| ClamAV | Win.Ransomware.Hydracrypt-9878672-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.34437 |
| ESET-NOD32 | MSIL/Filecoder.Chaos.A trojan |
| Emsisoft | Generic.Ransom.HydraCrypt.DC800C35 (B) |
| F-Secure | Trojan.TR/W32.MalwareX |
| Fortinet | MSIL/Filecoder.8878!tr.ransom |
| GData | MSIL.Trojan-Ransom.Remind.B |
| Detected | |
| K7AntiVirus | Ransomware ( 005a8b921 ) |
| K7GW | Ransomware ( 005a8b921 ) |
| Kaspersky | HEUR:Trojan-Ransom.MSIL.Agent.gen |
| Kingsoft | MSIL.Trojan-Ransom.Agent.gen |
| Lionic | Trojan.Win32.Agent.Y!c |
| Malwarebytes | Ransom.Chaos |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | Real Protect-LS!3BCB06BFD037 |
| MicroWorld-eScan | Generic.Ransom.HydraCrypt.DC800C35 |
| Microsoft | Ransom:MSIL/FileCoder.AD!MTB |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Destructor!1.B060 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | GenericRXPW-PH!3BCB06BFD037 |
| Sophos | Troj/Ransom-GWT |
| Symantec | Ransom.Sorry |
| Tencent | Trojan-Ransom.Msil.Agent.ga |
| Trapmine | malicious.moderate.ml.score |
| TrellixENS | GenericRXPW-PH!3BCB06BFD037 |
| TrendMicro | TROJ_FRS.0NA103LN24 |
| TrendMicro-HouseCall | TROJ_FRS.0NA103LN24 |
| VBA32 | Trojan.MSIL.DelShad.Heur |
| VIPRE | Generic.Ransom.HydraCrypt.DC800C35 |
| Varist | W32/Azorult.D.gen!Eldorado |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Zillya | Trojan.Filecoder.Win32.37347 |
| ZoneAlarm | Troj/Ransom-GWT |
| alibabacloud | Ransomware:Win/Filecoder.APU |
| huorong | Ransom/LockFile.fe |