Covid29 Ransomware.zip
Classification: Malicious
Covid29 Ransomware.zip is a ransomware. Detected by 57 antivirus engines. Linked to Chaos malware. Reported by Triage, last seen 2026-09-04.
Detection summary
- 57 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CHAOS (S0220)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Chaos | Triage | 2026-09-04 10:18:13 | 2026-09-04 10:18:13 | malicious-activity | S0220 Chaos |
Tags
chaos bootkit defense_evasion discovery evasion execution impact persistence privilege_escalation ransomware spyware stealer trojan upxSample information
- Filenames
- Covid29 Ransomware.zip
- SHA-256
bbb5c6b4f85c81a323d11d34629776e99ca40e983c5ce0d0a3d540addb1c2fe3- First indexed
- 2026-09-04 10:18:13
- Last updated
- 2026-10-13 04:22:51
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Application.TaskDisabler.aaW@aaaaa |
| AVG | Win32:MalwareX-gen [Ransom] |
| AhnLab-V3 | Trojan/Win.AutoRun.C4997442 |
| Alibaba | Trojan:MSIL/FileCoder.08558cc8 |
| Antiy-AVL | Trojan/Win32.DiskWriter |
| Arcabit | Generic.Ransom.HydraCrypt.D57EF9CA [many] |
| Avast | Win32:MalwareX-gen [Ransom] |
| Avira | TR/W32.MalwareX |
| BitDefender | Generic.Ransom.HydraCrypt.360185CA |
| Bkav | W32.Malware.24CF6D3F |
| CAT-QuickHeal | Trojan.Generic.TRFH381 |
| CTX | zip.trojan.msil |
| ClamAV | Win.Ransomware.Hydracrypt-9878672-0 |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | BAT.DisableTaskMgr.4 |
| ESET-NOD32 | BAT/Disabler.NFT trojan |
| Elastic | malicious (moderate confidence) |
| Emsisoft | Generic.Ransom.HydraCrypt.360185CA (B) |
| F-Secure | Trojan.TR/W32.MalwareX |
| Fortinet | MSIL/Filecoder.AGP!tr.ransom |
| GData | MSIL.Trojan-Ransom.Remind.B |
| Detected | |
| Gridinsoft | Malware.U.Chaos.tr |
| Ikarus | Trojan-Ransom.FileCrypter |
| Jiangmin | Trojan.DiskWriter.ant |
| K7AntiVirus | Ransomware ( 005d443f1 ) |
| K7GW | Ransomware ( 005d443f1 ) |
| Kaspersky | HEUR:Trojan-Ransom.MSIL.Agent.gen |
| Kingsoft | MSIL.Trojan-Ransom.Agent.gen |
| Lionic | Trojan.ZIP.HydraCrypt.j!c |
| Malwarebytes | Malware.AI.3635028790 |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | ti!BBB5C6B4F85C |
| NANO-Antivirus | Trojan.Win32.jpbnml.jqrsbl |
| Panda | Trj/CI.A |
| Rising | Trojan.Disabler/BAT!9.38545 (XSE:WFNFX0JBVDoBsYE0m4tAai3mFZouey99) |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Malicious Archive |
| Skyhigh | BehavesLike.Dropper.tc |
| Sophos | Troj/Ransom-GWT |
| Symantec | Trojan.Gen.NPE |
| Tencent | Trojan-Ransom.Win32.Agent.16000637 |
| TrellixENS | Artemis!9F0563F2FAAF |
| TrendMicro | Ransom_ApisCryptor.R002C0DHA24 |
| TrendMicro-HouseCall | Ransom_ApisCryptor.R002C0DHA24 |
| VBA32 | Trojan.MSIL.DelShad.Heur |
| VIPRE | Generic.Ransom.HydraCrypt.360185CA |
| Varist | W32/Agent.JL.gen!Eldorado |
| ViRobot | Trojan.Win.Z.Ransom.555520 |
| VirIT | Ransom.Win32.Chaos.DAO |
| Webroot | W32.Ransom.Chaos |
| Xcitium | Malware@#31fwq4q52jaid |
| Yandex | Trojan.Agent!x5bVCmFMhdU |
| ZoneAlarm | Troj/Ransom-GWT |
| alibabacloud | Ransomware:Win/Disabler.NFT |
| huorong | Ransom/LockFile.au |