f298725e197f974b7a8407c5d79114a4ac322c573813d543141ccf1d9119dd8b
Classification: Malicious
f298725e197f974b7a8407c5d79114a4ac322c573813d543141ccf1d9119dd8b is a ransomware (application/x-dosexec). Detected by 62 antivirus engines.
Detection summary
- 62 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: NETWALKER (S0457)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| NetWalker | Abuse.ch | 2020-06-01 14:29:09 | 2020-06-01 14:29:09 | S0457 Netwalker |
Sample information
- Filenames
- f298725e197f974b7a8407c5d79114a4ac322c573813d543141ccf1d9119dd8b.bin
- File type
- application/x-dosexec
- MD5
d09cfda29f178f57dbce6895cfb68372- SHA-1
82720e4d3fb83baff552ec25eea0fed2befe94fa- SHA-256
f298725e197f974b7a8407c5d79114a4ac322c573813d543141ccf1d9119dd8b- First indexed
- 2020-06-11 19:01:12
- Last updated
- 2026-09-27 00:42:01
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Ransom.Mailto |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Ransom] |
| AhnLab-V3 | Trojan/Win.RansomCrypt.R374144 |
| Alibaba | Ransom:Win32/NetWalker.55432ed0 |
| Arcabit | Trojan.Trojan.Ransomware.987 |
| Avast | Win32:MalwareX-gen [Ransom] |
| Avira | TR/W32.MalwareX |
| BitDefender | Gen:Variant.Trojan.Ransomware.987 |
| Bkav | W32.Malware.D351ECEF |
| CAT-QuickHeal | Ransom.Netwalker.S28709260 |
| CTX | exe.ransomware.netwalker |
| ClamAV | Win.Ransomware.Netwalker-7671868-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.31844 |
| ESET-NOD32 | Win32/Filecoder.NetWalker.D trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Trojan.Ransomware.987 (B) |
| F-Secure | Trojan.TR/W32.MalwareX |
| Fortinet | W32/NetWalker.B!tr.ransom |
| GData | Gen:Variant.Trojan.Ransomware.987 |
| Detected | |
| Gridinsoft | Ransom.Win32.Generic.oa!s1 |
| Jiangmin | Trojan.DelShad.xp |
| K7AntiVirus | Ransomware ( 005d64791 ) |
| K7GW | Ransomware ( 005d64791 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Crypmod.gen |
| Kingsoft | malware.kb.a.994 |
| Lionic | Trojan.Win32.NetWalker.j!c |
| Malwarebytes | Malware.AI.1534612122 |
| McAfeeD | Real Protect-LS!D09CFDA29F17 |
| MicroWorld-eScan | Gen:Variant.Trojan.Ransomware.987 |
| Microsoft | Ransom:Win32/NetWalker.H!rsm |
| NANO-Antivirus | Trojan.Win32.Filecoder.hjrouc |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Ransom.NetWalker!1.CFC6 (CLASSIC) |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | Ransom-NetW!D09CFDA29F17 |
| Sophos | Mal/Ransom-FW |
| Symantec | Ransom.Cryptolocker |
| TACHYON | Ransom/W32.NetWalker.70656 |
| Tencent | Trojan-Ransom.Win32.NetWalker.zk |
| TrellixENS | Ransom-NetW!D09CFDA29F17 |
| TrendMicro | Ransom.Win32.NETWALKER.SMTH |
| TrendMicro-HouseCall | Ransom.Win32.NETWALKER.SMTH |
| VBA32 | BScope.Backdoor.Mokes |
| VIPRE | Gen:Variant.Trojan.Ransomware.987 |
| Varist | W32/Netwalker.A.gen!Eldorado |
| VirIT | Trojan.Win32.Encoder.BVBC |
| Webroot | W32.Ransom.Netwalker |
| Xcitium | TrojWare.Win32.Ransom.NetWalker.SD@8rqqoe |
| Yandex | Trojan.Filecoder!ZsbuVNGs950 |
| Zillya | Trojan.Filecoder.Win32.14605 |
| ZoneAlarm | Mal/Ransom-FW |
| alibabacloud | Ransomware:Win/NetWalker.D |
| huorong | Ransom/Filecoder.bj |
| tehtris | Generic.Malware |