Lambda.exe

Classification: Malicious

Lambda.exe is a ransomware (application/x-dosexec, 236.0 KB). Detected by 54 antivirus engines. Linked to Wiper malware. 6 sightings, last seen 2026-09-14.

Detection summary

  • 54 antivirus detections
  • 1 IDS alerts
  • 1 processes observed
  • 32 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: WIPER (S0041)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2025-05-11 06:00:09 2026-09-14 17:45:05 malicious-activity
Lambda Triage 2026-07-06 12:27:02 2026-07-06 12:27:02 malicious-activity
Backdoor VM-Ray 2023-11-25 20:23:42 2023-11-25 22:23:41
Wiper VM-Ray 2023-11-25 20:23:42 2023-11-25 22:23:41 S0041 Wiper
Generic.Malware MalwareBazaar Abuse.ch 2023-11-25 19:03:58 2023-11-25 19:03:58 malicious-activity

Tags

evasive lambda defense_evasion discovery persistence ransomware spyware stealer

Sample information

Filenames
ea761022497e50f68f276b659e340d95afa27c6b72776aaa497ec3e38118e48a, ea761022497e50f68f276b659e340d95afa27c6b72776aaa497ec3e38118e48a.exe, Lambda.exe
File type
application/x-dosexec
Size
241664 bytes
MD5
d6d92703ad1bd824cbc022a6402d7337
SHA-1
25a46b05630c4927f8ec0d95c4d7bbb2ca93ccfa
SHA-256
ea761022497e50f68f276b659e340d95afa27c6b72776aaa497ec3e38118e48a
First indexed
2023-11-25 19:20:55
Last updated
2026-09-15 16:14:59

Antivirus detections

EngineDetection
BkavW32.AIDetectMalware
LionicTrojan.Win32.Lambda.j!c
DrWebTrojan.DownLoader46.33641
MicroWorld-eScanTrojan.GenericKD.70487343
CAT-QuickHealTrojanransom.Generic
SkyhighBehavesLike.Win32.NetLoader.dh
McAfeeArtemis!D6D92703AD1B
MalwarebytesMalware.AI.2206475733
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005ae1751 )
AlibabaRansom:Win32/Lambda.b315e08f
K7GWTrojan ( 005ae1751 )
Cybereasonmalicious.5630c4
ArcabitTrojan.Generic.D4338D2F
BitDefenderThetaGen:NN.ZexaF.36792.ouW@ayBba!nO
SymantecRansom.Lambda
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Filecoder.OPB
CynetMalicious (score: 100)
APEXMalicious
KasperskyHEUR:Trojan-Ransom.Win32.Generic
BitDefenderTrojan.GenericKD.70487343
NANO-AntivirusTrojan.Win32.Filecoder.kedsvr
AvastWin32:RansomX-gen [Ransom]
TencentMalware.Win32.Gencirc.10bf41e0
EmsisoftTrojan.GenericKD.70487343 (B)
F-SecureTrojan.TR/FileCoder.hswlr
VIPRETrojan.GenericKD.70487343
TrendMicroRansom.Win32.CELANCYC.THKBOBC
FireEyeGeneric.mg.d6d92703ad1bd824
SophosMal/Generic-S
SentinelOneStatic AI - Suspicious PE
VaristW32/ABRisk.GCTA-5254
AviraTR/FileCoder.hswlr
MAXmalware (ai score=83)
Antiy-AVLTrojan/Win32.Filecoder
GridinsoftRansom.Win32.Banker.sa
MicrosoftRansom:Win32/Lambda.MA!MTB
ZoneAlarmHEUR:Trojan-Ransom.Win32.Generic
GDataTrojan.GenericKD.70487343
GoogleDetected
AhnLab-V3Ransomware/Win.CELANCYC.C5543727
ALYacTrojan.Ransom.Filecoder
Cylanceunsafe
PandaTrj/RansomGen.A
TrendMicro-HouseCallRansom.Win32.CELANCYC.THKBOBC
Rising[email protected] (RDML:JjXmb7Mcplvi1m6zv3GBCw)
YandexTrojan.Filecoder!d1KQxHBQ8HA
IkarusTrojan-Ransom.FileCrypter
MaxSecureTrojan.Malware.10307848.susgen
FortinetW32/Filecoder.OPB!tr.ransom
AVGWin32:RansomX-gen [Ransom]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

Network contacts

79.133.51.208 192.168.0.0 192.168.0.1 192.168.0.3 192.168.0.4 192.168.0.5 192.168.0.6 192.168.0.7 192.168.0.8 192.168.0.9 192.168.0.10 192.168.0.11 192.168.0.12 192.168.0.13 192.168.0.14 192.168.0.15 192.168.0.16 192.168.0.17 192.168.0.18 192.168.0.19 192.168.0.20 192.168.0.21 192.168.0.22 192.168.0.23 192.168.0.24 192.168.0.25 192.168.0.26 192.168.0.27 192.168.0.28 192.168.0.29 192.168.0.30 192.168.0.31

Process list

NameCommand line
ea761022497e50f68f276b659e340d95afa27c6b72776aaa497ec3e38118e48a.exe