2026-03-12_930396ca316e4d07121ca04601aafc0e_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_medusalocker_njrat
Classification: Malicious
2026-03-12_930396ca316e4d07121ca04601aafc0e_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_medusalocker_njrat is a malicious file sample.
Detection summary
- 65 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: AVOSLOCKER (S1053)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Avoslocker | Triage | 2026-03-12 03:02:39 | 2026-03-12 03:02:39 | malicious-activity | S1053 AvosLocker |
Tags
avoslocker discovery ransomwareSample information
- Filenames
- 2026-03-12_930396ca316e4d07121ca04601aafc0e_amadey_avoslocker_cobalt-strike_elex_luca-stealer_lynx_medusalocker_njrat
- MD5
930396ca316e4d07121ca04601aafc0e- SHA-1
d6e2ef46476c8531e6a2d922149d619952d807dc- SHA-256
6ef3cb57ec42150e8af5727bdd20e1d20eb141090e40b5d9347c4db6634b5b5a- SHA-512
8b63e39c7febc8adcd042716aee31d002222248a07c9a47d7d3a7f89f422c02e0f20f14f4c5108fa3815e5efae7228730e95757da670444a824c246adbffd395- First indexed
- 2026-03-12 03:02:39
- Last updated
- 2026-07-13 02:20:49
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Generic.Ransom.BTCWare.AB3FFEB6 |
| APEX | Malicious |
| AVG | Win32:Avoslocker-B [Ransom] |
| AhnLab-V3 | Ransomware/Win.AvosLocker.C4559097 |
| Alibaba | Ransom:Win32/Avoslocker.4ba |
| Antiy-AVL | Trojan[Ransom]/Win32.Cryptor |
| Arcabit | Generic.Ransom.BTCWare.AB3FFEB6 |
| Avast | Win32:Avoslocker-B [Ransom] |
| Avira | HEUR/AGEN.1318629 |
| BitDefender | Generic.Ransom.BTCWare.AB3FFEB6 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Ransom.AvosLocker.S32038366 |
| CTX | exe.ransomware.avoslocker |
| ClamAV | Win.Ransomware.AvosLocker-10020714-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.34160 |
| ESET-NOD32 | Win32/Filecoder.AvosLocker.A trojan |
| Elastic | Windows.Ransomware.Avoslocker |
| Emsisoft | Generic.Ransom.BTCWare.AB3FFEB6 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1318629 |
| Fortinet | W32/Filecoder.OHU!tr.ransom |
| GData | Generic.Ransom.BTCWare.AB3FFEB6 |
| Detected | |
| Gridinsoft | Ransom.Win32.Generic.oa!s1 |
| Ikarus | Trojan-Ransom.AvosLocker |
| Jiangmin | Trojan.Cryptor.yv |
| K7AntiVirus | Ransomware ( 005f0efc1 ) |
| K7GW | Ransomware ( 005f0efc1 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Generic |
| Kingsoft | Win32.Trojan-Ransom.Generic.a |
| Lionic | Trojan.Win32.AvosLocker.j!c |
| Malwarebytes | Malware.AI.3655362809 |
| MaxSecure | Trojan.Malware.331298247.susgen |
| McAfeeD | ti!6EF3CB57EC42 |
| MicroWorld-eScan | Generic.Ransom.BTCWare.AB3FFEB6 |
| Microsoft | Ransom:Win32/AvosLocker.BK |
| NANO-Antivirus | Trojan.Win32.Encoder.jvrjer |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Cryptor!8.10A9 (TFE:5:lu8wUSf68tE) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.NetLoader.gh |
| Sophos | Troj/Ransom-GTK |
| Symantec | Ransom.AvosLocker!gen1 |
| TACHYON | Ransom/W32.AvosLocker.412160 |
| Tencent | Malware.Win32.Gencirc.10bb7e4f |
| TrellixENS | GenericRXRF-WH!930396CA316E |
| TrendMicro | Ransom.Win32.AVOSLOCKER.SMTH |
| TrendMicro-HouseCall | Ransom.Win32.AVOSLOCKER.SMTH |
| VBA32 | BScope.TrojanRansom.Cryptor |
| VIPRE | Generic.Ransom.BTCWare.AB3FFEB6 |
| Varist | W32/AVAddOn.C.gen!Eldorado |
| ViRobot | Trojan.Win32.Ransom.412160 |
| VirIT | Trojan.Win32.Encoder.BYNW |
| Webroot | W32.Trojan.Gen |
| Yandex | Trojan.Filecoder!rW9QaHDLsOM |
| Zillya | Trojan.Cryptor.Win32.664 |
| ZoneAlarm | Troj/Ransom-GTK |
| alibabacloud | Ransomware:Win/AvosLocker.375e8a65 |
| huorong | Ransom/LockFile.bt |
| Lionic | Trojan.Win32.AvosLocker.4!c |