Analysis

  • max time kernel
    121s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-04-2024 06:42

General

  • Target

    kayflock-beta/kayflock.exe

  • Size

    253KB

  • MD5

    2ea6211ab19482dddf2b32fdeddfe409

  • SHA1

    bfb9ab42d59ec933d1ebb8674bc697faaa99a52e

  • SHA256

    7a25def99b85f8486606ec7eb4d52395308afcc930e7b2df23897022b1d6baf1

  • SHA512

    e54d8b6db035ab9274c3f3a00474cf19d1543eb19f1c8eb89e11e33ddc6d675648201a70f495e6ddc0da4d71f17f01e3f6d77d5264effe1f0c46877379933bae

  • SSDEEP

    3072:yczkitvo4BpYN/6mBPry8TXROLdW5m4mURh9OOGm0kqxidvA8qY:yA4NCmBPry/N2VOOPwxU1q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\kayflock-beta\kayflock.exe
    "C:\Users\Admin\AppData\Local\Temp\kayflock-beta\kayflock.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2676
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x64&rid=win7-x64&apphost_version=6.0.28&gui=true
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2864
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2864 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:2624

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    c92f3389a4007d5034c7f4d6bbdc0ea4

    SHA1

    ca1da039a47a805f5c1fd709c5252c83f14933bc

    SHA256

    9f9ac6d34780d3d20273721574da393b08ce6cb9769e4e341091aa15815d3ce7

    SHA512

    5419332ba48c6bb84da24795a444fa975b978aea4175a8270dccecfc74a98ededfbda86e14fb319d209abb5773dc585430998f0ee428054ac5f61cb4aba7a8ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    9dd0d5824eb45ddd69121d789476e7a1

    SHA1

    44a810df0e8390a7091058644f0461bfa351f3e8

    SHA256

    6d33010587513291d2d1516344ba81a2b235438d477f6e73c03377e3647ac0fc

    SHA512

    4ea533c594eb8cb15f3e75e666a99eb1a0fccebd41ee5cb3b791c606ae14da02680cfe227c37ae2dd86805e2cb15ecaea11f876fc1b4775bfa516ca3ca185826

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d77de76df94844fd62c1ae9a69e50896

    SHA1

    e7c21be464e127be69a0f6cfe2a42c77a73a4b8f

    SHA256

    ac396bf4784725f1e11a60c736581437d2cb5f605d4f8acee449e751c9f644f0

    SHA512

    682ced1949466d72636dc24cd2b5214480fd603b10505deedf3737889d4045cbf52c510a2df297fff217e63ef60966dd4c772d0d273711f2bf1844513ae7c503

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    50b3c00aad7f6a28d339572d35bc39e7

    SHA1

    5946839bbc8e4ab85dfb081221867c0eb7c77966

    SHA256

    8566da7082da2c78a349dab85ea1bcf41b4756ef907d46d9bb73d9d3745032f0

    SHA512

    6db49d0f5833a79e8cdd73f1c55dbe2178ecfee28e2a42b62b11a8647a80a1e5a91278795d216448ba51d3329e2ebd0d23e21aa3e4a5aadef4438c71ea701eb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    e9aaf0373e00c96090b091290d49b4a4

    SHA1

    e63346d2f95975b2897cfc824833dffb68b99652

    SHA256

    ab77f7c37b5b3a31f9e5c50ea9b85381363222cfc26ea34b6b1a534e71f9f44d

    SHA512

    cb6cad7e3fbba569d7444d9f510f27a7af6233757d7cc54061b51fe57eceb800e52a07b1e5880deea47cb16af85dbc21dddc931b31422965f11c156ff82f34d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d6df427dce34818780b712e5eaef1f95

    SHA1

    544796c6356f7b7702d317e55e2aca0937b4ddd5

    SHA256

    2842f72208401425306682d3d0d5f73634c3cb053c4bcbd6d6e0ebdecedec86d

    SHA512

    38fd08b96c252e4ec4223b9324103f17311b8c395c3298b696c2abcb7927ba270fddde391ec85794de5a3361b1a6cfec0b646fe3a89d9c281aece5ee2b20088a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    a0afface4abd07feba2044e2c1a3561b

    SHA1

    b653fa65e87f7173c65cb5c2138bb6489f7ae336

    SHA256

    b29ec8566f49517ed610b643ffaed681c786726324698fa483e00ce130506f4e

    SHA512

    88699e75871b3b32acc52462646f41e2224dd8b26e88dc1658e99c182513c00de08453ad6e1ee256c33d6b450cc209950a3c328366eb65a5a585f2c2e3755fdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    16b66985351000ff2b092130e98c910d

    SHA1

    9d20e771e7bc2923ea77b0b12b62ac5e72194620

    SHA256

    872ca046eb062bc383c41c89de57f53cd1110b5d8079dfc5629160f43d6f8fd4

    SHA512

    57ccadfc1b1ddfdf4e76fb3556c8294f51cdd0922d6177f5245c60266a6b8da49bced6e6c67736b3c1ddcc62fb7a71de1734db11e8836766001dc334b4ee0498

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    72e87a9697c9d26f1e89b6f14ddf9f2e

    SHA1

    e2df4c8a5759f40f0bf23fb654cab4dab2e02a35

    SHA256

    18adb8d4dcda8ad3b513659860b3ba1120a9b8540a4d760a9128b6c971f5ac00

    SHA512

    9b45f7737ada08a43baf3d8b55ddbb451702ee17e0bb0b0a287f346306f8fca469fa30a8b4a7e6eb83acce9fa6285a7efb332912f8c5099f1e1f92dc5b076c8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    edc50f8326c189cb0d433f939028cda0

    SHA1

    43df62536672a45b310bcf8eb8d1a7320986d151

    SHA256

    e3d070a427a873f341a34ee3e75d0dabe5c9e77898358d288e3785a69ea576da

    SHA512

    6f655cb03c709e2f8a9cac43425d7cef46b141417d0fdffb0564cb8121490c6d58f77c0b586cf127a1cc0d15fddf9909d157204c3a83836674db3db9addc7993

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    fcb0a8991c6a1e2a8063845b23628c78

    SHA1

    6def647ab3d8998a840dce30281264fcc396a6d7

    SHA256

    0eb0813c4fcab8a4b58d6da4bd623075a4aa7e61c4bf62f7affc8e62a7d0e2dd

    SHA512

    00d6a1e45389949f9177eda904c214b5acfe63ae3305aba08154be3b80f1513ad4ba85f323a52fdb19071a2dfa537c31c9578501b3e616f608efc0ff009505fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    3eced406d49ae02358c7f69d39ce7b12

    SHA1

    d506242ceec47d1bd455dd220fe5a86f1f0674ed

    SHA256

    88ef44c24d387d1357e205befe634fdbeaa72a71e235837b10431022d9c18893

    SHA512

    f5268462889b3f1429e4bf3cfac535d9ffc99edbe7daf1550bfb31680dd8d96b6b3d56094b5fa99e178e29c1753a1386656bcf5f35dbbfeb9229ae63abedc5bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    533b056b166a05d50dadc3a581382e3e

    SHA1

    31dc9a57810f453703dd85b385e7a1c75d900411

    SHA256

    14e5245dce52f96ebaeff18a5f4fcb754e3b7c060168d7181a5060a88f4e1c50

    SHA512

    adb5cb760c105049e2f8d266b660474be5014e53eb2fcb49bf0c1bf6ac077c2bee80a596a8cc20bbf82905d45e3b8dd383a86c8347dd8bfc0c543a5ad972dac8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    13204a5b8e0089cd67f6a91f16a3b447

    SHA1

    116e96a46f7d1def011367bb07053f07b8103891

    SHA256

    27d6e6aa4db5e954c718b137f734a5ac79fc6bc8a859d77a080d21af7a45527f

    SHA512

    ec84213ada087deae380839416eed8cc9cceaa5687b4519b9168bbb99663b8dfcc141fb4f0a13d8140c4025a17f609271c42174877c5fea40f9087efc03979db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    e337a653f943743adf5cc532f475d4f0

    SHA1

    b3cc73c841cbea70c02af60342ceb77dccdfb748

    SHA256

    e2a819e94ebdbf777a08ee8e0a91be0ab0d252c26004fb230b587babddcade84

    SHA512

    47f4f6b9a3a9e473b4323cdb59aa4dad114fa097b33475211980ec26240b74813b67f9cd1992798e1b2ff39c683ac7f4c4c23c7c68ab9aeb53ba61d1a6fa6ba4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    5c6a53bba483d89aada64a9d85cf5bc2

    SHA1

    7b33df09ee4ab88a473deaaa5b4b0aa4cfc50709

    SHA256

    a93fac87c1e05396557ed6995ed5463b7bd754cfeb5de86a32a7d116b9382364

    SHA512

    8461932b93524ff5672116ccfa6bdcaddc5efd2c4d6bb53adbbd1c48870ee85237ca57e2be0a1f6c4a300c6b40706e71460caac485b20302dbe3c1ddc0697e46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    a3fb8925bc1eac72725271a588564a62

    SHA1

    cedef9bddce283a2aa20372985d47672b84fbd3f

    SHA256

    a25da19b15cc9aecd3abdedfe49b065b7c8efe2341adb8d633c9b58427a5435b

    SHA512

    3bafe99a66230e24f7e49092e42bd96639fee57388d676d82821c16d3c536b7583b419c22e3a7ae630733114b123dc4f8f376bcdee0b89c0ffdf21262f35db3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    f882dc5c5953063a0981d5af3216733b

    SHA1

    7d2752a051c9d439fa8eeef1266939b21541992b

    SHA256

    2ab695fdc092e7466a3e594bfabbfef9dd1278fda5ba6efc01a45d3b067520f4

    SHA512

    42b2b10bddbfde1ff9b143678b6f650e27e661a77ceda47d4879f6767844febed7d5add0ce15bf94f175dbc746e27572ab68983cbd7cafefdbd00e4a71f9d421

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    961c28ce8fc42e11cd5d35f90e797b61

    SHA1

    87ae37aececf95a7e37e9bce5d885492d053ad22

    SHA256

    723b8c98f144443a95b9e13b847bf6d38133274312e409bca80b80cd20592a2d

    SHA512

    943844f556b465f3d057ff3ace20e868ce9d216af2c372227e36b83d830707985307851d5be65ad7b9c51eae0a105f73ab0f5876085540ccdffc111601f8e3d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    83839285b0a595b837b83a8119a93347

    SHA1

    14af090b88044771be8fc2d0b0d2823d20158b2f

    SHA256

    89592d1107e071234019db3c52c9e0dc082b1ddd4fca57c12eec357bf1d2a89d

    SHA512

    e3b00b5581b20ede11ca06ba98d65b37f4c9d8fa55e5c53af035bf4b148037badee35a7610c17591b965a31cf96820396dbf1439586ecfe28494e6362ec56e50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    586bedac3ff0be0feaa04ab6a3c69b46

    SHA1

    0dba473aff2d8accd6150442577e1c1e740d8960

    SHA256

    17ab404b6bf32afe98bd9ec9c4c6f4a1fde82915de8763832fd6f0de7251ce01

    SHA512

    c05be415ec59eb7a6ede7093ba6e6b61978b6bb6102ea4e0daff72162bc205e84e7c47a087cdec1d6954815b88e7e6c22584b1316c649afa43588dc18dcad67f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    32b44f60cf36867f21bc4006c443c6c3

    SHA1

    ff2ec8ca350f6472ecfdbf7eff4fb2a317c69d6a

    SHA256

    ad251e35da37384db69884f18c10456f87160c2c67570f7aef62cda17fce312a

    SHA512

    7f3cbe764490973891e69877202003b71772a45d64534b97c74aec324d3f271fd81e831e8e3940e0f19e6d6e0f2ed4c6a71e62efc506fcd4a17c770a12c01d18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    fdff003104d659ae09e2962b0d0d7bed

    SHA1

    158ee613d045c262290b4b0b86b6d71de3bba586

    SHA256

    1313aa4427e3c7c8372076f264ba466a2fec66508486787443b37f53b6c48686

    SHA512

    92ae8efcf9f250479102da91fbe2add557d516178a5b7509d28a12b66e13e795385d17a314410cee4fe6e20c4c263f0e29ba2c90c162eec51b5e3b0838ff0505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    ac3d3deba468a77054f48ae37fbfa565

    SHA1

    ef12226a1306cb845959e93164a629c74f31e85d

    SHA256

    2c5f74d77b08934a8e899ef3aa18a15c1a2b818b29d7d982a7a97fee1e813473

    SHA512

    532126061236c6cb45eab47c1ab23a0cec409877d89e74b375227c7ffca3242a4357c785dafb4d873e67db8622792e74324af5cc94bad1cb579c048641c1b767

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    dd6ed6d9592fef0ca0bf72f65c2db681

    SHA1

    8870d08ba4ea7d27300d6f4f8566b06a18384556

    SHA256

    e3ba2d1f18c5e411c22fe78c11248b387ef07dce1c417e1810536679c02d83a4

    SHA512

    34204436d8aee8eea6c0cf107b0435fe515e7def804fc405b6b3250c8b0daa690ed929f3a8e77daae968b9b1c0eb9bbab54ebdc401f2e1dd11f0da44a4de38fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    f5b0b09a0a6aa6e26aa3538500fee43c

    SHA1

    8dc8a45ffb1de3bd02ca2736bdcfd97b7e3116a5

    SHA256

    07dfa02b195369117fd3822827d5632f903901585289baee2713125da5fb4dde

    SHA512

    e552adbe4e71e8883693e7e3d159dc285571ea70563b85269d1a9be3bc56d99aa723fee3445060f81a6b93b5870b83992b1e52b688bb1555f33f3755be0ec38d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    5814ee50de6dce28a1cd3e11b7cfa979

    SHA1

    1d01957dd595a0461ec3d8de940efe3abad99ddf

    SHA256

    b87264bb15a86ce2f660cdf01eb169c6a28d79e7de3f8e3eb90c40bb1c3d668f

    SHA512

    ca265abe090b45f1494fdeb0ae3d10f0c5f7fb5e2d211da81a5b5b141147be1d9d7569f04cb9a001b6bfa0e9b6df9a6b427f3f5341146821729d586de318e66f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    1bb833b293ed3ec2655ce2c3b5566c60

    SHA1

    e31581ef50a73284dfdbf52a32b2f8ed078be479

    SHA256

    1fd1283edcc2183e202b4143cf1d3b1775fc45f755a4466ba63392597a8f3c76

    SHA512

    776a07f99cd3cac2cfb2d2cd499f7dae3708fe0e54a1e9c904ca1ddf3cbe59080cd384a96214f0dc7b271507debf52e697236b4d29e51b06145868e6ff10050b

  • C:\Users\Admin\AppData\Local\Temp\Cab536E.tmp
    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar549F.tmp
    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a