9152cb45_by_Libranalysis
Classification: Malicious
9152cb45_by_Libranalysis is a ransomware (application/x-dosexec). Detected by 65 antivirus engines. Linked to Conti malware.
Detection summary
- 65 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CONTI (S0575)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Conti | Triage | 2026-08-24 03:29:15 | 2026-10-17 16:11:42 | malicious-activity | S0575 Conti |
| Generic.Malware | Abuse.ch | 2021-05-14 19:12:23 | 2021-05-14 19:12:23 | malicious-activity |
Tags
conti credential_access discovery execution persistence privilege_escalation ransomware spyware stealerSample information
- Filenames
- d21c71a090cd6759efc1f258b4d087e82c281ce65a9d76f20a24857901e694fc, 9152cb45_by_Libranalysis
- File type
- application/x-dosexec
- MD5
9152cb45994adab4dc27c33ee72a66e1- SHA-1
ab0c3361bf3ab8b7c40883b2d3107aa7f1d7428b- SHA-256
d21c71a090cd6759efc1f258b4d087e82c281ce65a9d76f20a24857901e694fc- First indexed
- 2021-05-14 20:15:07
- Last updated
- 2026-10-17 17:07:17
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Ransom.Conti |
| APEX | Malicious |
| AVG | Win32:Ace-K [Cryp] |
| AhnLab-V3 | Trojan/Win.Glupteba.R420668 |
| Alibaba | Ransom:Win32/Conti.aa2a3b1a |
| Antiy-AVL | Trojan[Ransom]/Win32.Conti |
| Arcabit | Trojan.Ransom.Conti.J |
| Avast | Win32:Ace-K [Cryp] |
| Avira | HEUR/AGEN.1316834 |
| BitDefender | Trojan.Ransom.Conti.J |
| BitDefenderTheta | Gen:NN.ZexaF.36680.uqW@aifuFqJi |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Ransom.Stop.P5 |
| ClamAV | Win.Packed.SmokeLoader-9861729-1 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cybereason | malicious.1bf3ab |
| Cylance | unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen13.30975 |
| ESET-NOD32 | Win32/Filecoder.Conti.R |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.Ransom.Conti.J (B) |
| F-Secure | Heuristic.HEUR/AGEN.1316834 |
| FireEye | Generic.mg.9152cb45994adab4 |
| Fortinet | W32/Kryptik.HKYG!tr |
| GData | Trojan.Ransom.Conti.J |
| Detected | |
| Gridinsoft | Ransom.Win32.Gandcrab.oa!s1 |
| Ikarus | Trojan.Win32.Crypt |
| Jiangmin | Trojan.Conti.f |
| K7AntiVirus | Trojan ( 0057c6a11 ) |
| K7GW | Trojan ( 0057c6a11 ) |
| Kaspersky | HEUR:Trojan-Spy.Win32.Stealer.gen |
| Kingsoft | malware.kb.a.1000 |
| Lionic | Trojan.Win32.Conti.l!c |
| MAX | malware (ai score=100) |
| Malwarebytes | Generic.Malware.AI.DDS |
| MaxSecure | Trojan.Malware.118212484.susgen |
| McAfee | Packed-GDR!9152CB45994A |
| MicroWorld-eScan | Trojan.Ransom.Conti.J |
| Microsoft | Ransom:Win32/Conti.VH!MSR |
| NANO-Antivirus | Trojan.Win32.Stealer.ivjajs |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Conti!8.11736 (TFE:5:kf78c0mleXB) |
| Sangfor | Ransom.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Upatre.fh |
| Sophos | Mal/GandCrypt-B |
| Symantec | Ransom.Conti |
| TACHYON | Ransom/W32.Conti.330240.B |
| Tencent | Trojan.Win32.Obfuscated.gen |
| TrendMicro | Ransom.Win32.CONTI.FAIW |
| TrendMicro-HouseCall | Ransom.Win32.CONTI.FAIW |
| VBA32 | Malware-Cryptor.Azorult.gen |
| VIPRE | Trojan.Ransom.Conti.J |
| Varist | W32/Kryptik.EYC.gen!Eldorado |
| ViRobot | Trojan.Win32.Ransom.330240.H |
| VirIT | Trojan.Win32.GenusT.DUQA |
| Webroot | W32.Trojan.Gen |
| Xcitium | Malware@#2s8w31ik8sk6r |
| Yandex | Trojan.Filecoder!9J9egOfypTw |
| Zillya | Trojan.Filecoder.Win32.19201 |
| ZoneAlarm | HEUR:Trojan-Spy.Win32.Stealer.gen |
| tehtris | Generic.Malware |