0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6
Classification: Malicious
0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6 is a malicious file sample. Linked to Avoslocker malware. Detected by 43 antivirus engines.
Detection summary
- 43 antivirus detections
- 0 IDS alerts
- 1 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2024-10-30 10:00:03 |
2024-10-30 10:44:44 |
|
|
| AvosLocker |
MalwareBazaar Abuse.ch |
2022-01-18 09:04:01 |
2022-01-18 09:04:01 |
malicious-activity
|
S1053 AvosLocker
|
| Generic.Malware |
MalwareBazaar Abuse.ch |
2022-01-18 09:04:01 |
2022-01-18 09:04:01 |
malicious-activity
|
|
Sample information
- Filenames
- 0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6, 0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6.elf
- File type
- application/x-executable
- Size
- 1619392 bytes
- MD5
d3cafcd46dea26c39dec17ca132e5138- SHA-1
6f110f251860a7f6757853181417e19c28841eb4- SHA-256
0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6- First indexed
- 2022-01-18 09:15:04
- Last updated
- 2026-04-12 01:17:15
Antivirus detections
| Engine | Detection |
|---|
| Bkav | VEX.Webshell |
| Lionic | Trojan.Linux.Agent.j!c |
| Symantec | Linux.RansomAvos |
| ESET-NOD32 | a variant of Linux/Filecoder.AvosLocker.A |
| TrendMicro-HouseCall | Trojan.Linux.RANSM.USELVAE22 |
| Avast | ELF:Filecoder-DC [Trj] |
| Kaspersky | HEUR:Trojan-Ransom.Linux.Agent.p |
| TrendMicro | Trojan.Linux.RANSM.USELVAE22 |
| McAfee-GW-Edition | Artemis!Trojan |
| Sophos | Linux/Ransm-P |
| Ikarus | Win32.Outbreak |
| GData | Linux.Trojan.Agent.FPYKUS |
| Microsoft | Trojan:Linux/Multiverze |
| Tencent | Linux.Trojan.Agent.Wsac |
| Fortinet | Linux/Filecoder_AvosLocker.A!tr |
| AVG | ELF:Filecoder-DC [Trj] |
| Ikarus | Trojan-Ransom.AvosLocker |
| Avira | LINUX/Ransom.twnbc |
| Microsoft | Trojan:Script/Sabsik.FL.B!ml |
| Cynet | Malicious (score: 99) |
| ALYac | Trojan.Ransom.Linux.Gen |
| Rising | Ransom.Agent!8.6B7 (CLOUD) |
| AhnLab-V3 | Ransomware/Linux.AvosLocker.1619392 |
| Antiy-AVL | Trojan[Ransom]/Linux.AvosLocker |
| CAT-QuickHeal | ELF.Trojan.46483.GC |
| ESET-NOD32 | Linux/Filecoder.AvosLocker.A trojan |
| F-Secure | Malware.LINUX/Ransom.twnbc |
| GData | Trojan.Linux.Ransom.EI |
| Google | Detected |
| Jiangmin | Trojan.Linux.but |
| Lionic | Trojan.Linux.AvosLocker.j!c |
| MicroWorld-eScan | Trojan.Linux.Ransom.EI |
| Microsoft | Ransom:Linux/AvosLocker.A!MTB |
| NANO-Antivirus | Trojan.Elf64.Ransom.knxqdo |
| SentinelOne | Static AI - Suspicious ELF |
| Tencent | Malware.Linux.Generic.1c03c99a |
| TrendMicro-HouseCall | Ransom.Linux.AVOSLOCKER.SMYXCA1Z |
| VIPRE | Trojan.Linux.Ransom.EI |
| Varist | E64/DCAvoslckr.CYPX |
| Xcitium | Malware@#1rhthndszqb7a |
| ZoneAlarm | Linux/Ransm-P |
| alibabacloud | RansomWare |
| huorong | Ransom/Linux.LockFile.c |
Process list
| Name | Command line |
|---|
| 0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6 | /home/ubuntu/0cd7b6ea8857ce827180342a1c955e79c3336a6cf2000244e5cfd4279c5fc1b6 |