locker_x86.dll
Classification: Malicious
locker_x86.dll is a ransomware (Windows_Dll_(X86-32)). Detected by 32 antivirus engines. Linked to Conti malware.
Detection summary
- 32 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CONTI (S0575)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Backdoor | VM-Ray | 2022-11-30 17:22:10 | 2022-11-30 17:22:10 | ||
| Conti | MalwareBazaar Abuse.ch | 2022-03-21 23:42:13 | 2022-03-21 23:42:13 | malicious-activity | S0575 Conti |
Sample information
- Filenames
- locker_x86.dll
- File type
- Windows_Dll_(X86-32)
- MD5
ed475bccfcbe008930aa837a8effd7a9- SHA-1
ac2785ef856f0a6a93a68d4c6f45fc87ff7bb530- SHA-256
fb737da1b74e8c84e6d8bd7f2d879603c27790e290c04a21e00fbde5ed86eee3- First indexed
- 2022-03-22 01:15:09
- Last updated
- 2026-05-28 14:51:04
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetect.malware2 |
| Lionic | Trojan.Win32.Conti.4!c |
| Elastic | malicious (high confidence) |
| Cynet | Malicious (score: 99) |
| McAfee | GenericRXQH-FT!ED475BCCFCBE |
| Sangfor | Ransom.Win32.Conti.AD!MTB |
| K7AntiVirus | Trojan ( 0057851c1 ) |
| K7GW | Trojan ( 0057851c1 ) |
| CrowdStrike | win/malicious_confidence_90% (W) |
| ESET-NOD32 | a variant of Win32/Filecoder.Conti.N |
| APEX | Malicious |
| Paloalto | generic.ml |
| Alibaba | Ransom:Win32/Conti.5c42223c |
| Tencent | Win32.Trojan.Filecoder.Alsh |
| Sophos | Mal/Generic-S |
| F-Secure | Trojan.TR/AD.ContiRansom.fxkas |
| TrendMicro | Ransom.Win32.CONTI.SMYXBBU1 |
| McAfee-GW-Edition | GenericRXQH-FT!ED475BCCFCBE |
| FireEye | Generic.mg.ed475bccfcbe0089 |
| Ikarus | Trojan-Ransom.Conti |
| Jiangmin | Trojan.Cryptor.vu |
| Avira | TR/AD.ContiRansom.fxkas |
| Microsoft | Ransom:Win32/Conti.AD!MTB |
| GData | Win32.Trojan.Agent.ZEE6GZ |
| VBA32 | BScope.TrojanRansom.Cryptor |
| Cylance | Unsafe |
| Rising | Ransom.Conti!1.D637 (CLOUD) |
| SentinelOne | Static AI - Suspicious PE |
| Fortinet | W32/Filecoder_Conti.N!tr |
| BitDefenderTheta | Gen:NN.ZedlaF.34294.nu4@au1pWOai |
| AVG | Win32:Conti-B [Ransom] |
| Avast | Win32:Conti-B [Ransom] |