2026-03-11_31c03cc1ccf855a45c2aeda2cf4ca766_clop_cobalt-strike_elex_remcos
Classification: Malicious
2026-03-11_31c03cc1ccf855a45c2aeda2cf4ca766_clop_cobalt-strike_elex_remcos is a ransomware. Detected by 54 antivirus engines. Linked to Clop malware.
Detection summary
- 54 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CLOP (S0611)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Clop | Triage | 2026-03-11 10:24:31 | 2026-03-11 10:24:31 | malicious-activity | S0611 Clop |
Tags
clop discoverySample information
- Filenames
- 2026-03-11_31c03cc1ccf855a45c2aeda2cf4ca766_clop_cobalt-strike_elex_remcos
- MD5
31c03cc1ccf855a45c2aeda2cf4ca766- SHA-1
201bcb7b3411aa65c815f1b79a86e8b71fcbb860- SHA-256
fa8fe5d9bf5f9af6cec07fe3487c2f1468a5aeabab76dafbe4740ad2675f2afa- SHA-512
cc7230011acc68a5a36efe401241db815ce45574369d64bd561b8270d749eee56fac9c576caf4580bc4f59389bc44f6aeb77e8301b46b22a6857a6c859e4325f- First indexed
- 2026-03-11 10:24:31
- Last updated
- 2026-08-06 00:21:10
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Generic.Ransom.Clop.34F27C13 |
| AVG | Win32:DangerousSig [Trj] |
| AhnLab-V3 | Win-Trojan/Suspig7.Exp |
| Alibaba | Ransom:Win32/HydraCrypt.15b |
| Antiy-AVL | Trojan[Ransom]/Win32.Clop |
| Arcabit | Generic.Ransom.Clop.34F27C13 |
| Avast | Win32:DangerousSig [Trj] |
| BitDefender | Generic.Ransom.Clop.34F27C13 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Ransom.Clop.S15381166 |
| CTX | exe.ransomware.clop |
| ClamAV | Win.Trojan.Agent-6944267-1 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.27240 |
| ESET-NOD32 | Win32/Filecoder.Cl0p.B trojan |
| Elastic | Windows.Ransomware.Clop |
| Emsisoft | MalCert.A (A) |
| Fortinet | W32/HydraCrypt.P!tr.ransom |
| GData | Generic.Ransom.Clop.34F27C13 |
| Detected | |
| Gridinsoft | Ransom.Win32.Banker.oa!s1 |
| Ikarus | Trojan-Ransom.HydraCrypt |
| Jiangmin | AdWare.StartSurf.mz |
| K7AntiVirus | Ransomware ( 006dbec41 ) |
| K7GW | Ransomware ( 006dbec41 ) |
| Kingsoft | Win32.Trojan.Generic.a |
| Lionic | Trojan.Win32.Agent.tqwt |
| Malwarebytes | Malware.AI.278751206 |
| McAfeeD | ti!FA8FE5D9BF5F |
| MicroWorld-eScan | Generic.Ransom.Clop.34F27C13 |
| Microsoft | Ransom:Win32/Clop.E |
| NANO-Antivirus | Trojan.Win32.Encoder.fnegfx |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Ransom.Clop!1.B5ED (CLASSIC) |
| Sangfor | Ransom.Win32.Clop.Vj87 |
| Skyhigh | Ransom-Clop!31C03CC1CCF8 |
| Sophos | Mal/Isher-Gen |
| Symantec | Ransom.Ploc |
| TACHYON | Ransom/W32.Clop.109896 |
| Tencent | Malware.Win32.Gencirc.10c460ff |
| TrellixENS | Ransom-Clop!31C03CC1CCF8 |
| TrendMicro-HouseCall | Ransom.Win32.CLOP.SM |
| VIPRE | Generic.Ransom.Clop.34F27C13 |
| Varist | W32/Filecoder.P.gen!Eldorado |
| ViRobot | Trojan.Win32.Ransom.109896 |
| VirIT | Trojan.Win32.GandCrab.BHM |
| Webroot | W32.Trojan.Gen |
| Yandex | Trojan.PWS.Agent!YXc+zKj1mPA |
| ZoneAlarm | Mal/Isher-Gen |
| alibabacloud | RansomWare:Win/Cl0p.ec911322 |
| huorong | Ransom/Filecoder.cs |