2026-05-07_f69da9759f27f9f84242af7c02710cbd_amadey_avaddon_cobalt-strike_darkgate_elex_luca-stealer_lynx_medusalocker_njrat
Classification: Malicious
2026-05-07_f69da9759f27f9f84242af7c02710cbd_amadey_avaddon_cobalt-strike_darkgate_elex_luca-stealer_lynx_medusalocker_njrat is a ransomware.
Detection summary
- 51 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: AVADDON (S0640)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Avaddon | Triage | 2026-05-07 04:37:45 | 2026-05-07 04:37:45 | malicious-activity | S0640 Avaddon |
Tags
avaddon defense_evasion discovery execution impact ransomware trojanSample information
- Filenames
- 2026-05-07_f69da9759f27f9f84242af7c02710cbd_amadey_avaddon_cobalt-strike_darkgate_elex_luca-stealer_lynx_medusalocker_njrat
- SHA-256
b0cccde2385d1d22a2a81804e174b286ca8d538017ad9c24fa16f39887628f7d- First indexed
- 2026-05-07 04:37:45
- Last updated
- 2026-09-03 02:25:21
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Trojan.Ransomware.872 |
| APEX | Malicious |
| AVG | Win32:Trojan-gen |
| AhnLab-V3 | Malware/Win.Ransom.R421765 |
| Antiy-AVL | Trojan[Ransom]/Win32.Avaddon |
| Arcabit | Trojan.Trojan.Ransomware.872 |
| Avast | Win32:Trojan-gen |
| Avira | HEUR/AGEN.1311690 |
| BitDefender | Gen:Variant.Trojan.Ransomware.872 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Ransom.Avvadon.S25780554 |
| CTX | exe.ransomware.generic |
| ClamAV | Win.Ransomware.Avaddon-9852658-0 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.MulDrop16.12853 |
| ESET-NOD32 | Win32/Filecoder.Avaddon.C trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Trojan.Ransomware.872 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1311690 |
| Fortinet | W32/Avaddon.C!tr.ransom |
| GData | Gen:Variant.Trojan.Ransomware.872 |
| Detected | |
| Gridinsoft | Malware.Win32.Gen.bot!se54774 |
| Jiangmin | Trojan.DelShad.bhg |
| K7AntiVirus | Trojan ( 00577dec1 ) |
| K7GW | Trojan ( 00577dec1 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Generic |
| Malwarebytes | Ransom.Avaddon |
| McAfeeD | ti!B0CCCDE2385D |
| MicroWorld-eScan | Gen:Variant.Trojan.Ransomware.872 |
| Microsoft | Ransom:Win32/Avaddon.MK!MTB |
| Panda | Trj/Genetic.gen |
| Rising | Ransom.Avaddon!1.C7A8 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | BehavesLike.Win32.Dropper.bh |
| Sophos | Troj/Avaddon-A |
| Trapmine | malicious.high.ml.score |
| TrellixENS | Trojan-FTMI!F69DA9759F27 |
| TrendMicro | Ransom.Win32.AVADDON.SMTHA |
| TrendMicro-HouseCall | Ransom.Win32.AVADDON.SMTHA |
| VIPRE | Gen:Variant.Trojan.Ransomware.872 |
| Varist | W32/Ransom.OS.gen!Eldorado |
| VirIT | Trojan.Win32.Genus.LZM |
| Zillya | Trojan.Filecoder.Win32.18512 |
| ZoneAlarm | Troj/Avaddon-A |
| alibabacloud | RansomWare:Win/Avaddon |
| huorong | Ransom/LockFile.i |