General
-
Target
2024-11-21_169c109fcb0c747cfe80734e94fb2324_avoslocker_cobalt-strike_luca-stealer
-
Size
881KB
-
Sample
241121-cvs91axejd
-
MD5
169c109fcb0c747cfe80734e94fb2324
-
SHA1
26f6929fc675f8b63bf7f5837d58e37ed4f0378e
-
SHA256
7572b7597accdd220bcabdd337c2479d4b1bfc45aca71ef23acd79ad6949499e
-
SHA512
09199ce9011c0811b3b45834e3c7b87d7323809b381c4e1d327dc6f26d0f9709287f5bc1453ebd8a6a6316e3631e17081b72a59d60a2d6a68e13e02863bc7b4a
-
SSDEEP
24576:FfXAuZSzePWK2FGkRXwSInFwLAXvcgfah36ZzY:aJzUjXkgfwqZzY
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-21_169c109fcb0c747cfe80734e94fb2324_avoslocker_cobalt-strike_luca-stealer.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-21_169c109fcb0c747cfe80734e94fb2324_avoslocker_cobalt-strike_luca-stealer.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
C:\Users\Admin\AppData\Local\Temp\Decryptfiles.txt
Targets
-
-
Target
2024-11-21_169c109fcb0c747cfe80734e94fb2324_avoslocker_cobalt-strike_luca-stealer
-
Size
881KB
-
MD5
169c109fcb0c747cfe80734e94fb2324
-
SHA1
26f6929fc675f8b63bf7f5837d58e37ed4f0378e
-
SHA256
7572b7597accdd220bcabdd337c2479d4b1bfc45aca71ef23acd79ad6949499e
-
SHA512
09199ce9011c0811b3b45834e3c7b87d7323809b381c4e1d327dc6f26d0f9709287f5bc1453ebd8a6a6316e3631e17081b72a59d60a2d6a68e13e02863bc7b4a
-
SSDEEP
24576:FfXAuZSzePWK2FGkRXwSInFwLAXvcgfah36ZzY:aJzUjXkgfwqZzY
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-