c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02

Classification: Malicious

c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02 is a ransomware (application/x-dosexec, 919.1 KB). Linked to Avoslocker malware.

Detection summary

  • 113 antivirus detections (80% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: AVOSLOCKER (S1053)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-11-08 05:30:03 2023-11-08 05:30:03
AvosLocker MalwareBazaar Abuse.ch 2021-12-24 17:51:19 2021-12-24 17:51:19 malicious-activity S1053 AvosLocker
Generic.Malware MalwareBazaar Abuse.ch 2021-12-24 17:51:19 2021-12-24 17:51:19 malicious-activity

Sample information

Filenames
test.exe, c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02.bin
File type
application/x-dosexec
Size
941120 bytes
MD5
825d6049ba8600ee5fefd817ac5444b4
SHA-1
31c4dfbf7029c5ca8334042faaf906477be1ec17
SHA-256
c0a42741eef72991d9d0ee8b6c0531fc19151457a8b59bdcf7b6373d1fe56e02
First indexed
2021-12-24 19:15:09
Last updated
2026-08-21 01:44:11

Antivirus detections

EngineDetection
BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.34325
MicroWorld-eScanDeepScan:Generic.Ransom.AVOSLocker.A.508E1AC6
CAT-QuickHealRansom.AvosLocker.S28952958
ALYacTrojan.Ransom.AvosLocker
Cylanceunsafe
VIPREDeepScan:Generic.Ransom.AVOSLocker.A.508E1AC6
SangforRansom.Win32.Avoslocker.Vo04
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderDeepScan:Generic.Ransom.AVOSLocker.A.508E1AC6
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.9ba860
ArcabitDeepScan:Generic.Ransom.AVOSLocker.A.508E1AC6
BitDefenderThetaGen:NN.ZexaF.36350.5uX@aC3@E6ii
CyrenW32/AVAddOn.C.gen!Eldorado
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Filecoder.AvosLocker.A
APEXMalicious
ClamAVWin.Ransomware.Deepscan-9938939-0
KasperskyHEUR:Trojan-Ransom.Win32.Cryptor.gen
AlibabaRansom:Win32/AvosLocker.f32f6b3c
RisingRansom.Cryptor!8.10A9 (TFE:5:3nKbzxcALhG)
SophosMal/Generic-S
ZillyaTrojan.Filecoder.Win32.20035
TrendMicroRansom.Win32.AVOSLOCKER.SMTHA
McAfee-GW-EditionArtemis!Trojan
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.825d6049ba8600ee
EmsisoftDeepScan:Generic.Ransom.AVOSLocker.A.508E1AC6 (B)
IkarusTrojan-Ransom.FileCrypter
JiangminTrojan.Cryptor.zn
WebrootW32.Ransom.Gen
GoogleDetected
MAXmalware (ai score=100)
Antiy-AVLTrojan[Ransom]/Win32.Cryptor
GridinsoftRansom.Win32.AI.oa!s1
XcitiumMalware@#fbt32ljtbzp9
MicrosoftRansom:Win32/AvosLocker.MK!MTB
ZoneAlarmHEUR:Trojan-Ransom.Win32.Cryptor.gen
GDataDeepScan:Generic.Ransom.AVOSLocker.A.508E1AC6
CynetMalicious (score: 100)
AhnLab-V3PUP/Win.ConvertAd.R440411
McAfeeGenericRXAA-AA!825D6049BA86
DeepInstinctMALICIOUS
VBA32BScope.Trojan.Filecoder
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/GdSda.A
TencentMalware.Win32.Gencirc.10bdc713
YandexTrojan.Filecoder!nILNrwWy6i0
SentinelOneStatic AI - Suspicious PE
MaxSecureTrojan.Malware.73657187.susgen
FortinetW32/Filecoder.OHU!tr.ransom
AVGWin32:Malware-gen
AvastWin32:Malware-gen
LionicTrojan.Win32.Cryptor.j!c
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforRansom.Win32.Cryptor.gen
AlibabaRansom:Win32/generic.ali2000010
CrowdStrikewin/malicious_confidence_100% (W)
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.OHU
BitDefenderGen:Variant.Doina.23283
MicroWorld-eScanGen:Variant.Doina.23283
TencentMalware.Win32.Gencirc.11d15b8d
Ad-AwareGen:Variant.Doina.23283
SophosML/PE-A
TrendMicroRansom_AvosLocker.R002C0DIG21
McAfee-GW-EditionRDN/Ransom
EmsisoftGen:Variant.Doina.23283 (B)
GDataGen:Variant.Doina.23283
AviraTR/Redcap.urwxm
Antiy-AVLTrojan/Generic.ASMalwS.349753E
KingsoftWin32.Troj.Undef.(kcloud)
ArcabitTrojan.Doina.D5AF3
McAfeeRDN/Ransom
MAXmalware (ai score=82)
VBA32BScope.TrojanRansom.Cryptor
MalwarebytesMalware.AI.3336335761
TrendMicro-HouseCallRansom_AvosLocker.R002C0DIG21
eGambitUnsafe.AI_Score_99%
BitDefenderThetaGen:NN.ZexaF.34114.5uX@aC3@E6ii
Paloaltogeneric.ml
MaxSecureTrojan.Malware.300983.susgen
ArcabitDump:Generic.Ransom.AVOSLocker.A.508E1AC6
BitDefenderDump:Generic.Ransom.AVOSLocker.A.508E1AC6
CTXexe.ransomware.avoslocker
ESET-NOD32Win32/Filecoder.AvosLocker.A trojan
EmsisoftDump:Generic.Ransom.AVOSLocker.A.508E1AC6 (B)
GDataDump:Generic.Ransom.AVOSLocker.A.508E1AC6
K7AntiVirusRansomware ( 006088631 )
K7GWRansomware ( 006088631 )
LionicTrojan.Win32.AvosLocker.j!c
MalwarebytesRansom.Filecoder
McAfeeDti!C0A42741EEF7
MicroWorld-eScanDump:Generic.Ransom.AVOSLocker.A.508E1AC6
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighArtemis!Trojan
TACHYONRansom/W32.AvosLocker.941120
TrellixENSGenericRXAA-AA!825D6049BA86
TrendMicro-HouseCallRansom.Win32.AVOSLOCKER.SMTHA
VBA32BScope.TrojanRansom.AvosLocker
VIPREDump:Generic.Ransom.AVOSLocker.A.508E1AC6
VaristW32/AVAddOn.C.gen!Eldorado
VirITTrojan.Win32.GenusT.DXZX
alibabacloudRansomWare
huorongRansom/LockFile.cp
MaxSecureTrojan.Malware.331298247.susgen
SkyhighBehavesLike.Win32.Infected.dh
ViRobotTrojan.Win.Z.Avoslocker.941120

Process list

NameCommand line
test.exe