2026-03-13_5ec17ee967083918a38b223b154b96a5_amadey_elex_hellokitty_metamorfo_play
Classification: Malicious
2026-03-13_5ec17ee967083918a38b223b154b96a5_amadey_elex_hellokitty_metamorfo_play is a malicious file sample. Linked to Play activity.
Detection summary
- 56 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: PLAY (G1040)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Play | Triage | 2026-03-13 03:25:21 | 2026-03-13 03:25:21 | malicious-activity | G1040 Play |
Tags
play discovery ransomwareSample information
- Filenames
- 2026-03-13_5ec17ee967083918a38b223b154b96a5_amadey_elex_hellokitty_metamorfo_play
- MD5
5ec17ee967083918a38b223b154b96a5- SHA-1
703ab5a0ce3d50ccfe6dfbdbf1e2f219cd4aa3a5- SHA-256
d02b7c4180c7453bd2389a4b6370176de6bf3a96acc6522c9528f24d95bcad3a- SHA-512
98c3b665f8c9be90074033cea9d973dc6b53d99fc991f5e746e3f261684a3263ad2d84a5d0b0cb0588e98cb208177ab16a5df768d63f63ac0d0355de645b25cd- First indexed
- 2026-03-13 03:25:21
- Last updated
- 2026-03-13 03:25:21
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Trojan.Ransomware.687 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| AhnLab-V3 | Ransomware/Win.Ransom.C5194425 |
| Alibaba | Ransom:Win32/Crypmodng.5b0b4756 |
| Antiy-AVL | Trojan[Ransom]/Win32.PLAY.gen |
| Arcabit | Trojan.Trojan.Ransomware.687 |
| Avast | Win32:Malware-gen |
| Avira | HEUR/AGEN.1366962 |
| BitDefender | Gen:Variant.Trojan.Ransomware.687 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | cld.trojanransom.crypmodng |
| CTX | exe.trojan.crypmodng |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.35470 |
| ESET-NOD32 | Win32/Filecoder.OLN trojan |
| Emsisoft | Gen:Variant.Trojan.Ransomware.687 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1366962 |
| Fortinet | W32/Filecoder.PLAY!tr.ransom |
| GData | Gen:Variant.Trojan.Ransomware.687 |
| Detected | |
| Gridinsoft | Ransom.Win32.Sabsik.oa!s1 |
| Ikarus | Trojan-Ransom.FileCrypter |
| Jiangmin | Trojan.Crypmodng.by |
| K7AntiVirus | Ransomware ( 005d16e11 ) |
| K7GW | Ransomware ( 005d16e11 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Crypmodng.gen |
| Kingsoft | malware.kb.a.786 |
| Lionic | Trojan.Win32.Crypmodng.4!c |
| Malwarebytes | Malware.AI.1835155001 |
| MaxSecure | Trojan.Malware.592172088.susgen |
| McAfeeD | ti!D02B7C4180C7 |
| MicroWorld-eScan | Gen:Variant.Trojan.Ransomware.687 |
| Microsoft | Trojan:Win32/Etset!rfn |
| NANO-Antivirus | Trojan.Win32.Crypmodng.jpxwsb |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Agent!8.6B7 (KTSE) |
| Sangfor | Trojan.Win32.Filecoder.V002 |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| TACHYON | Ransom/W32.Play.131072 |
| Tencent | Malware.Win32.Gencirc.10bdf9b8 |
| TrellixENS | Artemis!5EC17EE96708 |
| TrendMicro | Ransom.Win32.PLAYDE.SMYXCHJT-A |
| TrendMicro-HouseCall | Ransom.Win32.PLAYDE.SMYXCHJT-A |
| VBA32 | TrojanRansom.Crypmodng |
| VIPRE | Gen:Variant.Trojan.Ransomware.687 |
| Varist | W32/Trojan.NSHR-1965 |
| ViRobot | Trojan.Win.Z.Crypmodng.131072.A |
| Xcitium | TrojWare.Win32.Lethic.DZA@5s4u8n |
| Zillya | Trojan.Filecoder.Win32.24747 |
| alibabacloud | RansomWare:Win/Filecoder.92c49f99 |