Resubmissions

18-07-2024 07:25

240718-h84wjs1hpb 10

18-07-2024 07:19

240718-h51pqa1gng 10

17-07-2024 20:55

240717-zqkhmaydmq 10

17-07-2024 19:21

240717-x2pwdaycjb 10

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    17-07-2024 20:55

General

  • Target

    LockedIn.exe

  • Size

    650KB

  • MD5

    e9e34a4dbf0c9fe5fb595b0282b0b4f0

  • SHA1

    4f3f6bc4aff97eecb9ab52d47520e248c618da45

  • SHA256

    613af1bf17a11dbf12849568ce08186cc4109a5cdb32d0bcce7c1bd81306f5c6

  • SHA512

    b234f7a6fef8eb3153da20b1c9f668a8177e489817b1e7e36a572fbfc7dc3604f5cd509f5ff7087f4d3a2e3c1a5a0c7e93ae571be11c70732b1078ba8050a119

  • SSDEEP

    12288:dl6aKEZf4r/s6IzjtyHQDWcFXXGmmBJ0d35O3CEkk4zglJaKfZf4m:dlNCr/sFFmmmHIpKCEx4sljCm

Score
9/10

Malware Config

Signatures

  • Renames multiple (51) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\LockedIn.exe
    "C:\Users\Admin\AppData\Local\Temp\LockedIn.exe"
    1⤵
      PID:2748

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\Desktop\OpenJoin.xlsx

      Filesize

      11KB

      MD5

      ecb5627f45480600ab6e685df687e1ce

      SHA1

      0dd7e9524035b1b07e89c5752f268f9ae1f98584

      SHA256

      376edc83e0a1fd2d61380e60ccd5b6a65e85e434c2c76d4494ca72fae236d508

      SHA512

      16ae47dd9ef2e35faa2f6c78324a262bf398fcb13b959ef346a2f404f18870b5f1644329f51ba20fc6816bb2ed36043a379594fde8ba926125d9f435b7b9fc26

    • memory/2748-0-0x000007FEF54DE000-0x000007FEF54DF000-memory.dmp

      Filesize

      4KB

    • memory/2748-1-0x000007FEF5220000-0x000007FEF5BBD000-memory.dmp

      Filesize

      9.6MB

    • memory/2748-2-0x000007FEF5220000-0x000007FEF5BBD000-memory.dmp

      Filesize

      9.6MB

    • memory/2748-3-0x000007FEF5220000-0x000007FEF5BBD000-memory.dmp

      Filesize

      9.6MB

    • memory/2748-4-0x000007FEF5220000-0x000007FEF5BBD000-memory.dmp

      Filesize

      9.6MB

    • memory/2748-7-0x000007FEF5220000-0x000007FEF5BBD000-memory.dmp

      Filesize

      9.6MB

    • memory/2748-108-0x000007FEF5220000-0x000007FEF5BBD000-memory.dmp

      Filesize

      9.6MB

    • memory/2748-109-0x000007FEF54DE000-0x000007FEF54DF000-memory.dmp

      Filesize

      4KB