locker.exe
Classification: Malicious
locker.exe is a ransomware (application/x-dosexec). Detected by 61 antivirus engines. Linked to Conti malware.
Detection summary
- 61 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CONTI (S0575)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Conti | MalwareBazaar Abuse.ch | 2022-03-21 23:41:47 | 2022-03-21 23:41:47 | malicious-activity | S0575 Conti |
Sample information
- Filenames
- locker.exe
- File type
- application/x-dosexec
- MD5
6237d6565ebde559310120a80567e016- SHA-1
0aebd55ec0cb8ff6e7f5a853c68f9948f4ed824e- SHA-256
e1b147aa2efa6849743f570a3aca8390faf4b90aed490a5682816dd9ef10e473- First indexed
- 2022-03-22 01:15:09
- Last updated
- 2026-07-27 01:36:42
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Ransom.Conti |
| APEX | Malicious |
| AVG | Win32:Conti-B [Ransom] |
| AhnLab-V3 | Ransomware/Win.Conti.R372647 |
| Alibaba | Ransom:Win32/Conti.7e73518b |
| Antiy-AVL | Trojan[Ransom]/Win32.Conti |
| Arcabit | Trojan.Trojan.Ransomware.151 |
| Avast | Win32:Conti-B [Ransom] |
| Avira | TR/W32.Conti.B |
| BitDefender | Gen:Variant.Trojan.Ransomware.151 |
| Bkav | W32.Malware.A13A75A |
| CAT-QuickHeal | Ransom.Conti.S28488556 |
| CTX | exe.ransomware.conti |
| ClamAV | Win.Ransomware.Conti-9976741-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.35197 |
| ESET-NOD32 | Win32/Filecoder.Conti.L trojan |
| Elastic | Windows.Ransomware.Conti |
| Emsisoft | Gen:Variant.Trojan.Ransomware.151 (B) |
| F-Secure | Trojan.TR/W32.Conti.B |
| Fortinet | W32/Conti.F!tr.ransom |
| GData | Gen:Variant.Trojan.Ransomware.151 |
| Detected | |
| Ikarus | Trojan-Ransom.Conti |
| Jiangmin | Trojan.Agent.dmrd |
| K7AntiVirus | Trojan ( 005a3ac91 ) |
| K7GW | Trojan ( 005a3ac91 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Generic |
| Lionic | Trojan.Win32.Cryptor.trM4 |
| Malwarebytes | Generic.Ransom.FileCryptor.DDS |
| MaxSecure | Trojan.Malware.325837681.susgen |
| McAfeeD | Trojan:Win/Conti.AB |
| MicroWorld-eScan | Gen:Variant.Trojan.Ransomware.151 |
| Microsoft | Ransom:Win32/Conti.AD!MTB |
| NANO-Antivirus | Trojan.Win32.Encoder.iiojdb |
| Paloalto | generic.ml |
| Panda | Trj/Genetic.gen |
| Rising | Ransom.Conti!1.DF1E (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| Skyhigh | BehavesLike.Win32.NetLoader.dh |
| Sophos | Troj/Conti-H |
| Symantec | Downloader |
| TACHYON | Ransom/W32.Conti.216576 |
| Tencent | Malware.Win32.Gencirc.10bd97b4 |
| Trapmine | suspicious.low.ml.score |
| TrellixENS | Trojan-FSUS!6237D6565EBD |
| TrendMicro | Ransom.Win32.CONTI.SMTH.hp |
| TrendMicro-HouseCall | Ransom.Win32.CONTI.SMTH.hp |
| VBA32 | BScope.TrojanRansom.Cryptor |
| VIPRE | Gen:Variant.Trojan.Ransomware.151 |
| Varist | W32/Filecoder.DL.gen!Eldorado |
| VirIT | Trojan.Win32.Genus.KHC |
| Xcitium | Malware@#qk89pdw116xb |
| Yandex | Trojan.Filecoder!hbABR2DavWw |
| Zillya | Trojan.Filecoder.Win32.17588 |
| ZoneAlarm | Troj/Conti-H |
| alibabacloud | RansomWare |
| huorong | Ransom/GenaLocker.a |