Overview

overview

10

Static

static

3

be19681b21...70.exe

windows7-x64

10

be19681b21...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be19681b21f2a573b477444a788e00eb8dad2d740d11c02f14e878fe5b89fa70.7z

  • Size

    342KB

  • Sample

    250213-mpb4mswqcn

  • MD5

    dbf29082df53f86b0dff4b7e5cf12492

  • SHA1

    cef636cd36149ff8d7fed294df41e20301552901

  • SHA256

    e7d9a5b611a026cfe696e863dba29097e604f198c54f5da18b7db4a810f22d4f

  • SHA512

    ad68f3ee337676f37f7d467d30e524bc087ea14f441b0fae4a4398c9ec0346a5f72d8ef95c26e698ee336e2ac15c78d32ce323b6ff56f8f2854726079f8e96bf

  • SSDEEP

    6144:X2uu3CqIyKr/k6IEIGnwjmBjYbb1Dt1Irqu6V/xJLJ0xqzmW4vhgT40xnqu:X293fjgUEtnwCOqrOVJ0x8khgpf

Score
10/10
avoslockerdiscoveryexecutionransomware

Malware Config

Targets

    • Target

      be19681b21f2a573b477444a788e00eb8dad2d740d11c02f14e878fe5b89fa70

    • Size

      921KB

    • MD5

      075cb88f83fbe4ad2ae0f553697e7bdf

    • SHA1

      773dce7c01a42e8371cf49ceda07f26cba0907b9

    • SHA256

      be19681b21f2a573b477444a788e00eb8dad2d740d11c02f14e878fe5b89fa70

    • SHA512

      3f0a503acbfffc79eed37597d59e313c31f6b5451fdad79eacd611119ec17a4a245928079993689811a5695ad310951a282b1c493d08bdb31aa2b5fdbf63bf67

    • SSDEEP

      24576:SnkXEg1ZlhKG+WWZtCpDCE5Ie534SCeTpOl135HlIp:SkXEg1ZlIzZtCpGE5j5oSHOlxdlIp

    Score
    10/10
    avoslockerdiscoveryexecutionransomware

    • Avoslocker Ransomware

      Avoslocker is a relatively new ransomware, that was observed in late June and early July, 2021.

      ransomwareavoslocker

    • Avoslocker family

      avoslocker

    • Renames multiple (191) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Downloads MZ/PE file

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks