General

  • Target

    075cb88f83fbe4ad2ae0f553697e7bdf

  • Size

    921KB

  • Sample

    231219-mkvp7acdgl

  • MD5

    075cb88f83fbe4ad2ae0f553697e7bdf

  • SHA1

    773dce7c01a42e8371cf49ceda07f26cba0907b9

  • SHA256

    be19681b21f2a573b477444a788e00eb8dad2d740d11c02f14e878fe5b89fa70

  • SHA512

    3f0a503acbfffc79eed37597d59e313c31f6b5451fdad79eacd611119ec17a4a245928079993689811a5695ad310951a282b1c493d08bdb31aa2b5fdbf63bf67

  • SSDEEP

    24576:SnkXEg1ZlhKG+WWZtCpDCE5Ie534SCeTpOl135HlIp:SkXEg1ZlIzZtCpGE5j5oSHOlxdlIp

Score
10/10

Malware Config

Targets

    • Target

      075cb88f83fbe4ad2ae0f553697e7bdf

    • Size

      921KB

    • MD5

      075cb88f83fbe4ad2ae0f553697e7bdf

    • SHA1

      773dce7c01a42e8371cf49ceda07f26cba0907b9

    • SHA256

      be19681b21f2a573b477444a788e00eb8dad2d740d11c02f14e878fe5b89fa70

    • SHA512

      3f0a503acbfffc79eed37597d59e313c31f6b5451fdad79eacd611119ec17a4a245928079993689811a5695ad310951a282b1c493d08bdb31aa2b5fdbf63bf67

    • SSDEEP

      24576:SnkXEg1ZlhKG+WWZtCpDCE5Ie534SCeTpOl135HlIp:SkXEg1ZlIzZtCpGE5j5oSHOlxdlIp

    Score
    10/10
    • Avoslocker Ransomware

      Avoslocker is a relatively new ransomware, that was observed in late June and early July, 2021.

    • Renames multiple (185) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks