e7cdde7f52821eaa2b843fb712dfe1320a44ea0c331c43b81bd06ca5c39e4731.exe
Classification: Malicious
e7cdde7f52821eaa2b843fb712dfe1320a44ea0c331c43b81bd06ca5c39e4731.exe is a malicious file sample. Linked to Clop malware. Detected by 58 antivirus engines.
Detection summary
- 58 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CLOP (S0611)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-04-28 14:45:05 | 2026-04-28 14:45:05 | ||
| Clop | Triage | 2026-03-11 10:46:04 | 2026-04-28 14:18:15 | malicious-activity | S0611 Clop |
Tags
clop discovery ransomwareSample information
- Filenames
- e7cdde7f52821eaa2b843fb712dfe1320a44ea0c331c43b81bd06ca5c39e4731.exe, e7cdde7f52821eaa2b843fb712dfe1320a44ea0c331c43b81bd06ca5c39e4731.bin, 2026-03-11_58aac231958a941d9f2d570443148873_clop_darkgate_elex_remcos
- File type
- PE32 executable for MS Windows 6.00 (GUI), Intel i ...
- MD5
58aac231958a941d9f2d570443148873- SHA-1
ed1ea996bd83c96bc17303dea90f7ec625b66dfb- SHA-256
e7cdde7f52821eaa2b843fb712dfe1320a44ea0c331c43b81bd06ca5c39e4731- SHA-512
8be3bcd851ee0d3058f248f08219ea3e9a089dfed5882da5d3f3e3c9d4784576cd0005bf56411761b6d91edac82e3f875fa1990729776b8a584ae7e4d383fd3b- First indexed
- 2026-03-11 10:46:04
- Last updated
- 2026-05-10 03:30:14
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Trojan.Ransomware.2442 |
| AVG | Win32:MalwareX-gen [Ransom] |
| AhnLab-V3 | Trojan/Win.Generic.C5361414 |
| Alibaba | Ransom:Win32/KlopRansom.c5274ef8 |
| Antiy-AVL | Trojan[Ransom]/Win32.HydraCrypt |
| Arcabit | Trojan.Trojan.Ransomware.D98A |
| Avast | Win32:MalwareX-gen [Ransom] |
| Avira | TR/ATRAPS.Gen2 |
| BitDefender | Gen:Variant.Trojan.Ransomware.2442 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Ransom.Clop.S30657848 |
| CTX | exe.ransomware.cl0p |
| ClamAV | Win.Ransomware.Conti-10024936-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.27213 |
| ESET-NOD32 | Win32/Filecoder.Cl0p.F trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Trojan.Ransomware.2442 (B) |
| F-Secure | Trojan.TR/ATRAPS.Gen2 |
| Fortinet | W32/Filecoder_cl0p.A!tr.ransom |
| GData | Gen:Variant.Trojan.Ransomware.2442 |
| Detected | |
| Ikarus | Trojan-Ransom.Cl0p |
| K7AntiVirus | Ransomware ( 005ce2bc1 ) |
| K7GW | Ransomware ( 005ce2bc1 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.KlopRansom.gen |
| Kingsoft | Win32.Trojan-Ransom.KlopRansom.gen |
| Lionic | Trojan.Win32.Clop.j!c |
| Malwarebytes | Malware.AI.4228129128 |
| MaxSecure | Trojan.Malware.596664682.susgen |
| McAfeeD | Trojan:Win/Blackcat.EAA |
| MicroWorld-eScan | Gen:Variant.Trojan.Ransomware.2442 |
| Microsoft | Ransom:Win32/Clop.H |
| NANO-Antivirus | Trojan.Win32.KlopRansom.jupuiy |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Cl0p!8.188A5 (TFE:5:YEbuRArOlZM) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | BehavesLike.Win32.Worm.bh |
| Sophos | Troj/Clop-B |
| Symantec | Packed.Generic.620 |
| Tencent | Malware.Win32.Gencirc.14aaf4c4 |
| TrellixENS | GenericRXVF-TC!58AAC231958A |
| TrendMicro | Ransom.Win32.CLOP.TL0101DT26ZZ |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9z |
| VBA32 | BScope.Trojan.MTA.0549 |
| VIPRE | Gen:Variant.Trojan.Ransomware.2442 |
| Varist | W32/Ransom.RL.gen!Eldorado |
| VirIT | Trojan.Win32.GenusT.DYIM |
| Yandex | Trojan.Filecoder!3ouB8Ljz8kc |
| Zillya | Trojan.Filecoder.Win32.28371 |
| ZoneAlarm | Troj/Clop-B |
| alibabacloud | Ransomware:Win/Cl0p.D |
| huorong | Ransom/LockFile.cd |