asd.exe
Classification: Malicious
asd.exe is a ransomware (Windows executable). Detected by 58 antivirus engines. Linked to Chaos malware. Reported by 2 threat sources, last seen 2026-04-06.
Detection summary
- 58 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CHAOS (S0220)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-04-06 13:45:05 | 2026-04-06 13:45:05 | ||
| Chaos | Triage | 2026-04-06 12:55:54 | 2026-04-06 12:55:54 | malicious-activity | S0220 Chaos |
Tags
ransomware chaos spyware stealerSample information
- Filenames
- asd.exe, eb3f14248f3add35df85cb6faeca79ee2755bf8bb22de070c2b364d51f7e7b7c.bin
- File type
- PE32 executable for MS Windows 4.00 (GUI), Intel i ...
- MD5
dc5e36d44752752077f39947ea4644c4- SHA-1
03876dd8331f4c83fdcb5e669eeb64e246347017- SHA-256
eb3f14248f3add35df85cb6faeca79ee2755bf8bb22de070c2b364d51f7e7b7c- First indexed
- 2026-04-06 12:55:54
- Last updated
- 2026-10-13 02:01:47
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Generic.Ransom.HydraCrypt.8AAE2D1C |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Misc] |
| AhnLab-V3 | Ransomware/Win.FTD.C4597900 |
| Alibaba | Ransom:MSIL/Cryptolocker.530806dd |
| Antiy-AVL | Trojan[Ransom]/MSIL.Filecoder |
| Arcabit | Generic.Ransom.HydraCrypt.8AAE2D1C |
| Avast | Win32:MalwareX-gen [Misc] |
| Avira | TR/W32.Agent |
| BitDefender | Generic.Ransom.HydraCrypt.8AAE2D1C |
| Bkav | W32.Malware.7338CFAD |
| CAT-QuickHeal | Trojan.Generic.TRFH389 |
| CTX | exe.ransomware.msil |
| ClamAV | Win.Ransomware.Hydracrypt-9878672-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.ClipBankerNET.7 |
| ESET-NOD32 | MSIL/Filecoder.Chaos.B trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Generic.Ransom.HydraCrypt.8AAE2D1C (B) |
| F-Secure | Trojan.TR/W32.Agent |
| Fortinet | MSIL/Filecoder.RCDE!tr.ransom |
| GData | Generic.Ransom.HydraCrypt.8AAE2D1C |
| Detected | |
| K7AntiVirus | Ransomware ( 005a8b921 ) |
| K7GW | Ransomware ( 005a8b921 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Generic |
| Kingsoft | Win32.Trojan-Ransom.Generic.a |
| Lionic | Trojan.Win32.HydraCrypt.j!c |
| Malwarebytes | Ransom.FileCryptor.MSIL.Generic |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | Real Protect-LS!DC5E36D44752 |
| MicroWorld-eScan | Generic.Ransom.HydraCrypt.8AAE2D1C |
| Microsoft | Ransom:MSIL/Cryptolocker.RW!MTB |
| NANO-Antivirus | Trojan.Win32.Filecoder.lfzpsy |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Destructor!1.B060 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Ransomware-FTD!DC5E36D44752 |
| Sophos | Troj/Ransom-GWT |
| Symantec | Ransom.Gen.HC |
| TACHYON | Ransom/W32.DN-Agent.26624.J |
| Tencent | Trojan-Ransom.Win32.Agent.16000637 |
| Trapmine | malicious.moderate.ml.score |
| TrellixENS | Ransomware-FTD!DC5E36D44752 |
| TrendMicro | Ransom.MSIL.CHAOS.SMYPBHET |
| TrendMicro-HouseCall | Ransom.MSIL.CHAOS.SMYPBHET |
| VBA32 | Trojan.MSIL.DelShad.Heur |
| VIPRE | Generic.Ransom.HydraCrypt.8AAE2D1C |
| Varist | W32/Azorult.D.gen!Eldorado |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Zillya | Trojan.Filecoder.Win32.45578 |
| ZoneAlarm | Troj/Ransom-GWT |
| alibabacloud | Ransomware:Win/Filecoder.APU |
| huorong | Ransom/MSIL.LockFile.c!crit |