Avoslocker Ransomware

Avoslocker is a relatively new ransomware, that was observed in late June and early July, 2021.

Avoslocker family

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

Deletes shadow copies

Ransomware often targets backup files to inhibit system recovery.

Modifies boot configuration data using bcdedit

Renames multiple (8494) files with added filename extension

This suggests ransomware activity of encrypting all the files on the system.