Resubmissions

18-07-2024 07:25

240718-h84wjs1hpb 10

18-07-2024 07:19

240718-h51pqa1gng 10

17-07-2024 20:55

240717-zqkhmaydmq 10

17-07-2024 19:21

240717-x2pwdaycjb 10

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-07-2024 20:55

General

  • Target

    LockedIn.exe

  • Size

    650KB

  • MD5

    e9e34a4dbf0c9fe5fb595b0282b0b4f0

  • SHA1

    4f3f6bc4aff97eecb9ab52d47520e248c618da45

  • SHA256

    613af1bf17a11dbf12849568ce08186cc4109a5cdb32d0bcce7c1bd81306f5c6

  • SHA512

    b234f7a6fef8eb3153da20b1c9f668a8177e489817b1e7e36a572fbfc7dc3604f5cd509f5ff7087f4d3a2e3c1a5a0c7e93ae571be11c70732b1078ba8050a119

  • SSDEEP

    12288:dl6aKEZf4r/s6IzjtyHQDWcFXXGmmBJ0d35O3CEkk4zglJaKfZf4m:dlNCr/sFFmmmHIpKCEx4sljCm

Score
9/10

Malware Config

Signatures

  • Renames multiple (68) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\LockedIn.exe
    "C:\Users\Admin\AppData\Local\Temp\LockedIn.exe"
    1⤵
      PID:2924

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2924-0-0x00007FFA428E5000-0x00007FFA428E6000-memory.dmp

      Filesize

      4KB

    • memory/2924-1-0x000000001C3A0000-0x000000001C86E000-memory.dmp

      Filesize

      4.8MB

    • memory/2924-2-0x00007FFA42630000-0x00007FFA42FD1000-memory.dmp

      Filesize

      9.6MB

    • memory/2924-3-0x000000001C910000-0x000000001C9AC000-memory.dmp

      Filesize

      624KB

    • memory/2924-4-0x00007FFA42630000-0x00007FFA42FD1000-memory.dmp

      Filesize

      9.6MB

    • memory/2924-5-0x00000000019A0000-0x00000000019A8000-memory.dmp

      Filesize

      32KB

    • memory/2924-6-0x00007FFA42630000-0x00007FFA42FD1000-memory.dmp

      Filesize

      9.6MB

    • memory/2924-7-0x00007FFA42630000-0x00007FFA42FD1000-memory.dmp

      Filesize

      9.6MB

    • memory/2924-8-0x000000001F9E0000-0x000000001FA42000-memory.dmp

      Filesize

      392KB

    • memory/2924-9-0x00007FFA42630000-0x00007FFA42FD1000-memory.dmp

      Filesize

      9.6MB

    • memory/2924-10-0x00007FFA42630000-0x00007FFA42FD1000-memory.dmp

      Filesize

      9.6MB

    • memory/2924-15-0x00007FFA42630000-0x00007FFA42FD1000-memory.dmp

      Filesize

      9.6MB

    • memory/2924-148-0x00007FFA428E5000-0x00007FFA428E6000-memory.dmp

      Filesize

      4KB

    • memory/2924-149-0x00007FFA42630000-0x00007FFA42FD1000-memory.dmp

      Filesize

      9.6MB