Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/05/2024, 01:02

General

  • Target

    2024-05-21_df425b726fc554c5f2184acda17fddd9_avoslocker_metamorfo_revil.exe

  • Size

    21.3MB

  • MD5

    df425b726fc554c5f2184acda17fddd9

  • SHA1

    1a1a2b3e602b92320f416760a7f55741ac1ec75c

  • SHA256

    4e6808fca83f2b7c7b08504407c8dac001eb278d76f1e24b8802af46e5636f32

  • SHA512

    e43fce99f4c566434778e170abbab6e68a782e35797db62e609c13cdb4392eef385420d467812636e65018d72a71b6e797b1c870260a597810a0a824141e8651

  • SSDEEP

    196608:BCfsQRc4Zkr+K6SHULTHpFnsVufrqNnaUQGXxXCS1gJypzT:BFUarEJhsofrqNa/GXxT1R

Score
1/10

Malware Config

Signatures

  • Modifies registry class 3 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-21_df425b726fc554c5f2184acda17fddd9_avoslocker_metamorfo_revil.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-21_df425b726fc554c5f2184acda17fddd9_avoslocker_metamorfo_revil.exe"
    1⤵
    • Modifies registry class
    • Modifies system certificate store
    PID:2108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads