sub_cbe100c6df23.bin

Classification: Malicious

sub_cbe100c6df23.bin is a malicious file sample (Windows executable). Linked to Chaos malware. 13 sightings from 3 threat sources, last seen 2026-05-24.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CHAOS (S0220)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Blackmatter Triage 2026-05-01 17:39:20 2026-05-24 01:32:33 malicious-activity
Generic Malware Hybrid-Analysis 2026-05-01 17:45:04 2026-05-13 08:45:06
Chaos MalwareBazaar Abuse.ch 2026-05-02 02:09:18 2026-05-02 02:09:18 malicious-activity S0220 Chaos

Tags

ransomware umbrella windows-server-utility winnti blackmatter defense_evasion evasion execution impact persistence privilege_escalation trojan discovery evasive hiddentear

Sample information

Filenames
sub_cbe100c6df23.bin, cbe100c6df230f335864b23fef453c96effc9430cb9e963f62f4f0af92512ae5.exe, LB3.exe, 2026-05-01_5c792389eda9b6e3c0a26501fcaf3aa8_destroyer_elex_glassworm_wannacry, cbe100c6df230f335864b23fef453c96effc9430cb9e963f62f4f0af92512ae5.bin
File type
PE32 executable for MS Windows 4.00 (GUI), Intel i ...
MD5
5c792389eda9b6e3c0a26501fcaf3aa8
SHA-1
e5ab1aa3d9e901b3b0489d8a2b6a48325755a241
SHA-256
cbe100c6df230f335864b23fef453c96effc9430cb9e963f62f4f0af92512ae5
First indexed
2026-05-01 17:20:43
Last updated
2026-10-07 18:53:03