2026-03-11_432919b01ac22149a130f471199b6fce_amadey_elex_hellokitty_play
Classification: Malicious
2026-03-11_432919b01ac22149a130f471199b6fce_amadey_elex_hellokitty_play is a ransomware. Detected by 60 antivirus engines. Linked to Play activity.
Detection summary
- 60 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: PLAY (G1040)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Play | Triage | 2026-03-11 10:33:14 | 2026-03-11 10:33:14 | malicious-activity | G1040 Play |
Tags
play discovery ransomware spyware stealerSample information
- Filenames
- 2026-03-11_432919b01ac22149a130f471199b6fce_amadey_elex_hellokitty_play
- MD5
432919b01ac22149a130f471199b6fce- SHA-1
b584b99b976b893b2d4807cbf22b2a5c97dd536f- SHA-256
e0da18d3175d5f312eb49d0ca79de633d78736370212e540c0058ed7adf7fdee- SHA-512
377740272e6cf8d1ce102b8e48bae017ba08b80eb9b4c8558f2830eca8b721bed1b8b775edc856a4911f008fb5eb94627256f21170790cf510d26475763e3d8c- First indexed
- 2026-03-11 10:33:14
- Last updated
- 2026-09-25 01:41:10
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Trojan.Ransomware.924 |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Ransom] |
| AhnLab-V3 | Trojan/Win.Generic.C5217612 |
| Alibaba | Ransom:Win32/MalwareX.12e625cd |
| Antiy-AVL | Trojan[Ransom]/Win32.PLAY |
| Arcabit | Trojan.Trojan.Ransomware.924 |
| Avast | Win32:MalwareX-gen [Ransom] |
| Avira | TR/W32.MalwareX |
| BitDefender | Gen:Variant.Trojan.Ransomware.924 |
| Bkav | W32.Malware.E7434D8A |
| CAT-QuickHeal | Ransom.Play.S32038318 |
| CTX | exe.ransomware.play |
| ClamAV | Win.Ransomware.Ransomware-10059712-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.36089 |
| ESET-NOD32 | Win32/Filecoder.PLAY.B trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Trojan.Ransomware.924 (B) |
| F-Secure | Trojan.TR/W32.MalwareX |
| Fortinet | W32/Filecoder.PLAY!tr.ransom |
| GData | Gen:Variant.Trojan.Ransomware.924 |
| Detected | |
| Jiangmin | Trojan.Agent.eijv |
| K7AntiVirus | Ransomware ( 005fe9ee1 ) |
| K7GW | Ransomware ( 005fe9ee1 ) |
| Kaspersky | Trojan-Ransom.Win32.Agent.baso |
| Kingsoft | Win32.Trojan-Ransom.Agent.baso |
| Lionic | Trojan.Win32.Play.j!c |
| Malwarebytes | Ransom.Play |
| MaxSecure | Trojan.Malware.584259415.susgen |
| McAfeeD | ti!E0DA18D3175D |
| MicroWorld-eScan | Gen:Variant.Trojan.Ransomware.924 |
| Microsoft | Ransom:Win32/Play.E |
| NANO-Antivirus | Trojan.Win32.Encoder.jtkrlp |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Agent!8.6B7 (TFE:5:pvkKOIjHEBK) |
| Sangfor | Ransom.Win32.Play.V1b2 |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | BehavesLike.Win32.Infected.ch |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| TACHYON | Ransom/W32.Play.113152.C |
| Tencent | Malware.Win32.Gencirc.14aae429 |
| TrellixENS | GenericRXAA-AA!432919B01AC2 |
| TrendMicro | Ransom.Win32.PLAYDE.SMYXCHKT |
| TrendMicro-HouseCall | Ransom.Win32.PLAYDE.SMYXCHKT |
| VBA32 | TrojanRansom.Agent |
| VIPRE | Gen:Variant.Trojan.Ransomware.924 |
| Varist | W32/Filecoder.NU.gen!Eldorado |
| VirIT | Trojan.Win32.GenusB.DGFS |
| Webroot | W32.Ransomware.Gen |
| Yandex | Trojan.GenAsa!DS+xdKjbUw0 |
| Zillya | Trojan.Filecoder.Win32.27252 |
| alibabacloud | Ransomware:Win/LockFile.GEA |
| huorong | Ransom/LockFile.gu |