Analysis

  • max time kernel
    92s
  • max time network
    112s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-05-2024 11:05

General

  • Target

    2024-05-09_b5d113a9bda6c443842a05535c219c09_avoslocker_metamorfo_revil.exe

  • Size

    21.3MB

  • MD5

    b5d113a9bda6c443842a05535c219c09

  • SHA1

    e438bd2089c0a15bf5317f19e08301a88ff95a2b

  • SHA256

    ec7dbced3a705e37209aefd4fa86ddc2db7d8033deba585b33c8066afd393421

  • SHA512

    217e5efb73a445b3ff4ba385900708e67db9ac519a13fffd2d636879b1ffca899f2ba36e1f1a2803bbd7c4074d6317b5c0c293349b5a7af6795cbefc6347d717

  • SSDEEP

    196608:1CfsQRc4Zkr+K6SHULTHpFnsVufrqNZaUQGXEXCS1gJyXz7:1FUarEJhsofrqNI/GXET17

Score
1/10

Malware Config

Signatures

  • Modifies registry class 3 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-09_b5d113a9bda6c443842a05535c219c09_avoslocker_metamorfo_revil.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-09_b5d113a9bda6c443842a05535c219c09_avoslocker_metamorfo_revil.exe"
    1⤵
    • Modifies registry class
    • Modifies system certificate store
    PID:4000

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads