2026-03-16_9f8b04941e1dc337c2074aa0137f43e1_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat
Classification: Malicious
2026-03-16_9f8b04941e1dc337c2074aa0137f43e1_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat is a ransomware. Detected by 63 antivirus engines.
Detection summary
- 63 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: AVOSLOCKER (S1053)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Avoslocker | Triage | 2026-03-16 01:50:34 | 2026-03-16 01:50:34 | malicious-activity | S1053 AvosLocker |
Tags
avoslocker defense_evasion discovery evasion execution impact ransomwareSample information
- Filenames
- 2026-03-16_9f8b04941e1dc337c2074aa0137f43e1_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_njrat
- MD5
9f8b04941e1dc337c2074aa0137f43e1- SHA-1
26c46b02a3b1a8c7e22cde6bfe19b42575036172- SHA-256
629fab16fe4fdcde763d2f1f6d67e5c96c01248d6a21e0d6ff36bb14db3ae794- SHA-512
71dbd50bbea61d0e23b16571404943be2c199b2d9850fe17e46da31751be71ab49416fba68b60149cd453a98f0ab0890eb983218189ded348dfe5afcaecac587- First indexed
- 2026-03-16 01:50:34
- Last updated
- 2026-08-28 02:50:47
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Ransomware.DN |
| AVG | Win32:MalwareX-gen [Ransom] |
| AhnLab-V3 | Ransomware/Win.AvosLocker.R452361 |
| Alibaba | Ransom:Win32/AvosLocker.10dc7a74 |
| Antiy-AVL | Trojan[Ransom]/Win32.Convagent |
| Arcabit | Trojan.Ransomware.DN |
| Avast | Win32:MalwareX-gen [Ransom] |
| Avira | TR/W32.MalwareX |
| BitDefender | Trojan.Ransomware.DN |
| Bkav | W32.Malware.695D4D02 |
| CAT-QuickHeal | Ransom.Avoslocker.S27130740 |
| CTX | exe.ransomware.avoslocker |
| ClamAV | Win.Ransomware.Deepscan-9938939-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.34626 |
| ESET-NOD32 | Win32/Filecoder.AvosLocker.A trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.Ransomware.DN (B) |
| F-Secure | Trojan.TR/W32.MalwareX |
| Fortinet | W32/Filecoder.OHU!tr.ransom |
| GData | Trojan.Ransomware.DN |
| Detected | |
| Gridinsoft | Ransom.Win32.AI.oa!s1 |
| Jiangmin | Trojan.DelShad.buh |
| K7AntiVirus | Ransomware ( 006095c11 ) |
| K7GW | Ransomware ( 006095c11 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Convagent.gen |
| Kingsoft | Win32.Trojan-Ransom.Convagent.gen |
| Lionic | Trojan.Win32.AvosLocker.j!c |
| Malwarebytes | Ransom.Filecoder |
| MaxSecure | Trojan.Malware.680636803.susgen |
| McAfeeD | ti!629FAB16FE4F |
| MicroWorld-eScan | Trojan.Ransomware.DN |
| Microsoft | Ransom:Win32/AvosLocker.MBK!MTB |
| NANO-Antivirus | Trojan.Win32.DelShad.jpyrxd |
| Paloalto | generic.ml |
| Panda | Trj/Genetic.gen |
| Rising | Trojan.Filecoder!8.68 (TFE:5:pZJ1k8KCxxO) |
| SUPERAntiSpyware | Ransom.Locky/Variant |
| Sangfor | Ransom.Win32.Avoslocker.V898 |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | BehavesLike.Win32.Infected.ch |
| Sophos | Troj/Ransom-GTK |
| Symantec | Ransom.AvosLocker |
| TACHYON | Ransom/W32.Avoslocker.826880 |
| Tencent | Malware.Win32.Gencirc.10bbf25e |
| TrellixENS | ACL/Trojan Generic.JKMJ |
| TrendMicro | Ransom.Win32.AVOSLOCKER.SMYXBLNT |
| TrendMicro-HouseCall | Ransom.Win32.AVOSLOCKER.SMYXBLNT |
| VBA32 | BScope.TrojanRansom.AvosLocker |
| VIPRE | Trojan.Ransomware.DN |
| Varist | W32/Trojan.ICF.gen!Eldorado |
| ViRobot | Trojan.Win.Z.Delshad.826880.Y |
| VirIT | Trojan.Win32.Genus.LXS |
| Webroot | W32.Ransom.Gen |
| Yandex | Trojan.DelShad!P4KTmYQXcHU |
| Zillya | Trojan.Filecoder.Win32.20880 |
| ZoneAlarm | Troj/Ransom-GTK |
| alibabacloud | Ransomware:Win/Lockfile.CPI |
| huorong | Ransom/LockFile.du |