찾아줄게요

LOCKED 파일은 무엇입니까?

• 안녕하세요. 제 컴퓨터에서 LOCKED라는 파일을 찾았는데 이것이 무엇인지 잘 모르겠습니다. 알려주시면 감사하겠습니다.

• LOCKED 파일은 Philadelphia 암호화 파일 입니다. Philadelphia에서 배포한 파일인 것으로 보입니다. 2017-10-30 07:30:42에 처음으로 보고되었으며 2017-10-30 07:30:42에 마지막으로 보고되었습니다.

• Philadelphia 프로그램을 다운로드하여 LOCKED 파일을 열 수 있습니다.

• Philadelphia 랜섬웨어 암호화 파일
  
  Philadelphia ransomware encrypted file

• LOCKED (TXT)

• 연관 링크 #1: 첨부된 링크가 없습니다.

• 연관 링크 #2: 첨부된 링크가 없습니다.

• [2021-05-19 22:21:32] @melvinsalas @Zoho I'm using @AdGuard Ad Blocker and they blocked the forms of your services. They use @virustotal Can you work to unblock your services? https://www.virustotal.com/gui/url/b1748a8002b25e1ea2f9e0f224aee1a650543b3e9fd45dabff253edd0ad8eeec/detection

• [2021-03-20 18:33:06] @JAMESWT_MHT @Malwaredev @malwrhunterteam @James_inthe_box @blackorbird @BleepinComputer Mentioned #Gopher #Ransomware sample https://bazaar.abuse.ch/sample/66dc1cd0bcac37c0ddf8d31accc62cdbbdafbb08893f03e01dcc602ec5690a95/ [email protected] https://twitter.com/JAMESWT_MHT/status/1373221049291137027/photo/1

• [2021-03-20 18:13:12] @Malwaredev Which Ransomware is this??? AnyRUn: https://app.any.run/tasks/6538d0f0-d29e-436a-876b-0bb66f83a83e/ VT: https://www.virustotal.com/gui/file/66dc1cd0bcac37c0ddf8d31accc62cdbbdafbb08893f03e01dcc602ec5690a95/detection Email ID: [email protected] Pattern:ZGVza3RvcC5pbmk= [email protected] @malwrhunterteam @JAMESWT_MHT @James_inthe_box @blackorbird @BleepinComputer

• [2021-03-10 10:08:22] @bad_packets @ipvideo @WilliamTurton "Verkada's fear-mongering and massive direct calling sales team are certainly winning deals. However. unless Verkada changes both attitude and architecture. those end users are going to soon recognize the big problems of Verkada's locked-in model." https://ipvm.com/reports/verkada-onvif

• [2021-03-02 23:49:51] @InQuest #opendir with Phish kit and source code: paulhofstadler.com Poses as locked invoice document requiring sign-in to view. https://twitter.com/InQuest/status/1366777783142260743/photo/1

• [2021-02-23 13:01:51] @fbgwls245 #ThunderX/#Ranzy #Ransomware 00E4808514CC401027E426B128182991 ext: .RANZYLOCKED Note: readme.txt @BleepinComputer @demonslay335 @Amigo_A_ @siri_urz @malwrhunterteam https://twitter.com/fbgwls245/status/1364077993811869698/photo/1

• [2021-02-20 18:35:01] @phishunt_io #NewPhishing | #phishing #scam ???? /pembatalan--blocked--facebook.ml/ ???? 207.148.70.171 ☁ AS-CHOOPA ???? cPanel. Inc. Certification Authority https://twitter.com/phishunt_io/status/1363074674410807298/photo/1

• [2021-02-01 18:07:47] @ozuma5119 #Phishing Alert⚠ #MoqHao hxxps://aeoip.com/ ‼️ need UserAgent= (iPhone|Android) & SrcIP= JP IP: 207.180.254.127 (AS51167 Contabo.DE????????) Registrar: NICENIC https://otx.alienvault.com/indicator/domain/aeoip.com Brand: AEON Bank. イオン銀行 Japan???????? BlockedRedirect: hxxps://sagawae.kijjh.com/ https://twitter.com/ozuma5119/status/1356182448963346432/photo/1

• [2021-01-25 16:49:25] @ozuma5119 #Phishing Alert⚠ #MoqHao hxxps://aeoxe.com/ ‼️ need UserAgent= (iPhone|Android) & SrcIP= JP???????? IP: 207.180.254.127 (AS51167 Contabo.DE????????) Registrar: NICENIC https://otx.alienvault.com/indicator/domain/aeoxe.com Brand: AEON Bank. イオン銀行 Japan???????? BlockedRedirect: hxxps://post.sagvwa.com/ https://twitter.com/ozuma5119/status/1353626015273078786/photo/1

• [2021-01-25 15:55:03] @ffforward #Malware #fail of the week on monday morning already? ❌Attaches .iso that is blocked as standard in outlook ❌.iso contains passworded kaka_crypted.zip that contains the (probably) malicious .exe ???? Knock yourself out: https://bazaar.abuse.ch/sample/a346699c8e4c2fa32b2f49d942b072e30ae42df94778f817e8323361395c39fd/ cc @JAMESWT_MHT @James_inthe_box https://twitter.com/ffforward/status/1353612333604626432/photo/1

• [2021-01-18 17:20:26] @siri_urz .locked 22AA5C5CDABEAE3B53F8CC1FE0B0B3D9 O:\FileLocker-master\RunDll_4\obj\Debug\RunAsDll.pdb https://twitter.com/siri_urz/status/1351097102735192064/photo/1

• [2021-01-13 22:51:26] @Cryptolaemus1 new #emotet Epoch 1 url ://ketorecipesfit.com/wp-admin/afanv/ ://mertelofis.com/wp-content/As0/ ://givingthanksdaily.com/CP/ ://datawyse.net/0X3QY/ ://cs.lcxxny.com/wp-includes/E3U8nn/ ://makiyazhdoma.ru/blocked/tgEeW8M/ ://trustseal.enamad.ir.redshopfa.com/admit/wJJvvG/

• [2020-12-29 15:34:55] @Cryptolaemus1 /kolerkar.com/wp-snapshots/aRfdr7HT1/ /gjorgji.com/1v1lol-unblocked/JRuP/ 2 of 2

• [2020-12-28 19:15:32] @fbgwls245 #Ransomware D3715AB62BB922B56FB64B38C3FEAE8F ext: ************.lockedv1 RansomNote: READMEV1.txt @BleepinComputer @demonslay335 @Amigo_A_ @siri_urz https://twitter.com/fbgwls245/status/1343515926814105600/photo/1

• [2020-12-14 00:33:43] @GrujaRS #Thanos #Ransomware new extension .locked! Ransomnote;HOW_TO_DECYPHER_FILES.txt Contact : [email protected] Sample VT https://www.virustotal.com/gui/file/d86c0f01f524ac5fe1c78b57db10616a242881c6f356807924ec5b2a24f3b65a/detection https://twitter.com/GrujaRS/status/1338160181579042816/photo/1

• [2020-12-02 23:15:09] @Emm_ADC_Soft New Variant #HiddenTear #Ransomware Ext: .LOCKED Email: [email protected] sample: https://app.any.run/tasks/47b2c8fd-f4df-4698-9518-b3b99a89f5bc @BleepinComputer @Amigo_A_ @JAMESWT_MHT @demonslay335 @VirITeXplorer @xiaopao80087499 @malwrhunterteam @siri_urz

• [2020-11-20 23:33:15] @alexjbutcher @PenetrumSec https://otx.alienvault.com/indicator/ip/91.199.212.52 shows it as hosting intermediate certificates for many high profile CAs. I wonder if it's been included deliberately so as cause it to be classified as an IoC and consequently get blocked by naïve consumers of TI feeds..

• [2020-11-19 01:42:07] @ozuma5119 1/2 #Phishing Alert⚠ hxxp://bshbayjqpajqi.com/netstation IP: (cloudflare)✅already blocked Registrar: JPRS 日本レジストリサービス???????? Reseller: SAKURA Internet さくらインターネット???????? https://pastebin.com/bdA8rMGK https://otx.alienvault.com/indicator/domain/bshbayjqpajqi.com Brand: アプラス APLUS. 新生銀行 Shinsei Bank???????? https://twitter.com/ozuma5119/status/1329117699343929344/photo/1

• [2020-11-12 23:49:02] @underlinux @PayPal looks like your cdn is considered a malicious host https://www.virustotal.com/gui/ip-address/151.101.193.21/relations and is being blocked by many reputation IP systems you should look into this.

• [2020-11-06 15:42:25] @Venndeavour @JoltieRL @UnlockedCPU i cant 100% promise that its safe especially since the tool doesnt have an official site so its just some shady site. but i used it myself and it worked flawlessly for photoshop with 0 complications VirusTotal scan: https://www.virustotal.com/gui/url/9ea6ea7a19abe337de8c07d5e69221cccd34347102db0aa70a37d0e547bec10d/detection

• [2020-10-20 17:33:26] @ffforward #zloader #sovietZloader from last night via google docs > /donwloadfiles.top XLS: https://bazaar.abuse.ch/sample/e758b12ea734ee85058f8d42fc1dce15f535bda4ddff3b424c92fa617622a675/ DLL: https://bazaar.abuse.ch/sample/8895213de00492d3755473bdc57627cdd9d90189b043f2a3dc7ae948d589eb1d/ #Signed LRHOEUSYOEOXISTPKZ C2 still /fqnceas.su but lot's of other domains in the config. Mails not blocked by @MSThreatProtect @MsftSecIntel https://twitter.com/ffforward/status/1318500566490845185/photo/1

• [2020-10-20 04:22:00] @CracksLegit Among us cracked! All skins hats and pets unlocked! virus total: https://www.virustotal.com/gui/file/3f8ea2f431744e2c78a9b015de1b519b56ad465f0e61cbadb9f7485e3dfe813c/detection download link: https://uploadrar.com/vb2zidryiwgi

• [2020-10-15 19:43:54] @Arkbird_SOLG It's starting to get interesting again for people who have memories of the last US elections. https://www.washingtontimes.com/news/2020/oct/14/kayleigh-mcenany-twitter-account-locked/

• [2020-09-29 21:42:33] @lazyactivist192 So I'm locked in for the talk I'm giving about Emotet's Email Stealer (and the COM Objects that make it up) https://cybershock.lv/

• [2020-09-15 06:44:12] @GrujaRS #ThunderX #Ransomware extension .tx_locked! Ransom note;readme.txt Contact: [email protected] [email protected] Sample VT https://www.virustotal.com/gui/file/ce40e14206c9c3128064f6c03c9030289df4ad3303e83c9ee2b8740b5f88de74/detection … pic.twitter.com/ZO0fdpC8O4

• [2020-09-07 22:26:11] @siri_urz 897FA75679D26557788400DFDAD35CEC #ransomware ThunderX .tx_locked pic.twitter.com/RUniVtMxo1

• [2020-08-29 19:40:46] @micham Today's attack on the same target @UKGM_Presse ( #they blocked me for whatever reason) @jlugiessen https://www.virustotal.com/gui/url/36210d0d21b43a2a0d35213e9b54c750b7d65bf9f29883aaf315707ff3b931e0/detection … https://twitter.com/micham/status/1298662281517993987 … pic.twitter.com/XbIS39CTuM

• [2020-08-26 01:01:57] @IncompetentIs @WashCntyInsider Do you check this feed? We do not use Facebook and have been trying to let you know that your website is currently flagged as serving malware. having certificate issues. and is currently blocked by secure DNS like Cisco umbrella. https://www.virustotal.com/gui/url/dfed6e948bf93d21c80d477a7830c65f559a03754d3851d2050c66c1ff5be368/detection …

• [2020-08-20 15:42:08] @xiaopao80087499 #Ransomware mail: [email protected] or [email protected] ext:locked https://www.virustotal.com/gui/file/84b21a255f10926069e7065ad7a907948926130a7cd090c0931ebcc3a0165e25/community … @Amigo_A_ pic.twitter.com/Y1AhjElpii

• [2020-08-17 17:48:37] @struppigel Ransomware with .wholocked extension. Looks like #HiddenTear variant. Found by @Jirehlov yesterday acc. to VT. but didn't see it on your time lime PDB: C:\Users\ahmet\Desktop\x\x\ransomware-fud_2018-master\Gendarmerie B.V.3\obj\Debug\mavideo.pdb https://www.virustotal.com/gui/file/acbbd63b166f97184e52c06f643bd931b20abd587148de4f90a35cbf4d338d18/community … pic.twitter.com/7xO61Df5X4

• 보이스피싱, 불법촬영물, 랜섬웨어, 사이버 안보위협 등에 관련된 사안의 경우 다음과 같은 기관 및 단체의 도움을 받을 수 있습니다. 노모어랜섬(No More Ransom) 경찰청 사이버범죄 신고시스템 국가정보원 민원센터