A Deep-dive Analysis of the AvosLocker Ransomware

This report from Cyble Research Lab analyzes the AvosLocker ransomware: a Windows console-based C/C++ ransomware that encrypts files (appending .avos), targets network shares, uses AES-256, employs techniques such as Restart Manager and process termination, creates GET_YOUR_FILES_BACK.txt ransom notes pointing to an onion site, and includes IOCs (a SHA-256 hash and a mutex name) plus recommended mitigations.