Analysis
- max time kernel
106s - max time network
117s - platform
windows10-2004_x64 - resource
win10v2004-20240412-en - resource tags
- submitted
13/04/2024, 17:32
General
- Target kayflock-beta/kayflock.exe
- Size 253KB
- Sample240413-v4rrmsab8v
- SHA256 7a25def99b85f8486606ec7eb4d52395308afcc930e7b2df23897022b1d6baf1
Score
7/10
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
- Enumerates system info in registry 2 TTPs 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\kayflock-beta\kayflock.exe"C:\Users\Admin\AppData\Local\Temp\kayflock-beta\kayflock.exe"1⤵
- Checks computer location settings
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3412-0-0x00007FFE2B2E0000-0x00007FFE2B7DE000-memory.dmp
memory/3412-1-0x00007FFE2B2E0000-0x00007FFE2B7DE000-memory.dmp