AVCrypt
- First seen
- 2018-02-01 00:00:00
- Malware type
- ransomware, wiper
- Profile updated
- 2026-07-07 14:47:17
Targeted industries: financial-services technology-and-telecommunications
Context
AVCrypt is a form of ransomware that not only encrypts files but also attempts to disable the victim’s security software. Its behavior suggests a dual role as a wiper, potentially adding to the damage it causes beyond the initial encryption.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Avcrypt_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Avcrypt (report)
- twitter.com — 976925447043846145 (report)
- bleepingcomputer.com — The Avcrypt Ransomware Tries To Uninstall Your Av Software (report)