AvosLocker
Software · ATTACK:enterprise:S1053
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1053",
"title": "AvosLocker",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1053",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--0945a1a5-a79a-47c8-9079-10c16cdfcb5d",
"external_id": "S1053",
"domain": "enterprise",
"created": "2023-01-11T21:17:36.149Z",
"modified": "2025-04-21T19:40:47.538Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Joint CSA AvosLocker Mar 2022",
"url": "https://www.ic3.gov/Media/News/2022/220318.pdf"
},
{
"source_name": "Malwarebytes AvosLocker Jul 2021",
"url": "https://www.malwarebytes.com/blog/threat-intelligence/2021/07/avoslocker-enters-the-ransomware-scene-asks-for-partners"
},
{
"source_name": "Trend Micro AvosLocker Apr 2022",
"url": "https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-avoslocker"
}
]
}Explicit source assertions (16)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1b0ca110-bb1d-434d-a271-6574fdb11723
Malwarebytes AvosLocker Jul 2021ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1688
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3b089236-9b2f-40ee-9230-6961de8a60be
Costa AvosLocker May 2022 · Trend Micro AvosLocker Apr 2022ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1486
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--40861c0e-9cbc-4355-a7c0-cc0405c70b82
Joint CSA AvosLocker Mar 2022 · Malwarebytes AvosLocker Jul 2021 · Trend Micro AvosLocker Apr 2022 · Cisco Talos Avos Jun 2022ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4c362fcd-939d-48e8-9279-731a663875b0
Trend Micro AvosLocker Apr 2022ATTACK:enterprise:C0018 → uses → ATTACK:enterprise:S1053
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6ccac8cb-9e5f-4031-bf27-4ced4a1672d2
Costa AvosLocker May 2022 · Cisco Talos Avos Jun 2022ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--748cd538-d2a0-470c-b6fb-68e73b8069b1
Malwarebytes AvosLocker Jul 2021ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1027.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7b275e8a-83fd-4f2b-8ec4-eb36dae007fd
Malwarebytes AvosLocker Jul 2021ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--86ca25c9-8cc3-43f8-bf19-2aca39bcf05e
Malwarebytes AvosLocker Jul 2021 · Trend Micro AvosLocker Apr 2022ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1036.008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b1a27372-01f1-4abf-b586-949e9e796c32
Trend Micro AvosLocker Apr 2022ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1564.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b1aab9dc-267d-4208-b1bc-14396d7e0d8d
Malwarebytes AvosLocker Jul 2021ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1489
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b56db835-3b80-49e8-964d-0c1c52d182fe
Malwarebytes AvosLocker Jul 2021ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1135
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d421d0ce-6821-4d06-9249-214daacac1b0
Joint CSA AvosLocker Mar 2022 · Malwarebytes AvosLocker Jul 2021ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e12155de-d422-47e4-9ce5-a7fe8011b74b
Malwarebytes AvosLocker Jul 2021ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f2ce9aae-bb45-4018-a5f3-922b9fcdf26a
Malwarebytes AvosLocker Jul 2021ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f83fb52a-03f5-4e70-9e08-3365c85c84ba
Malwarebytes AvosLocker Jul 2021ATTACK:enterprise:S1053 → uses → ATTACK:enterprise:T1529
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fc89b538-26d8-434a-954f-e7d0b384b506
Trend Micro AvosLocker Apr 2022