Analysis

  • max time kernel
    165s
  • max time network
    121s
  • platform
    windows10_x64
  • resource
    win10-en-20211104
  • submitted
    17-11-2021 16:43

General

  • Target

    Coffee (1).exe

  • Size

    1.4MB

  • MD5

    235aa72b4fb4b2306ece386b744a24c8

  • SHA1

    ba38baa996854dd6ed41f62626d6bdd66e6ef247

  • SHA256

    4bcc29096d98a0707de7159f42fdd90e81a2d9274a68a3e44da66bf114e48438

  • SHA512

    173db0a30d1fd9fb45b27d214af63dd31e7e60b7aab301a4d9f5de1e8ce6e365817996080591bd7ade7295000e696696cb62d3662154e033e2ae7bbcd374b721

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Coffee (1).exe
    "C:\Users\Admin\AppData\Local\Temp\Coffee (1).exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2612-118-0x00007FF76BF70000-0x00007FF76BF71000-memory.dmp
    Filesize

    4KB

  • memory/2612-120-0x0000027DA8DC0000-0x0000027DA8DC2000-memory.dmp
    Filesize

    8KB

  • memory/2612-121-0x0000027DA8DC2000-0x0000027DA8DC4000-memory.dmp
    Filesize

    8KB

  • memory/2612-122-0x0000027DA8DC4000-0x0000027DA8DC5000-memory.dmp
    Filesize

    4KB

  • memory/2612-123-0x0000027DA8DC5000-0x0000027DA8DC7000-memory.dmp
    Filesize

    8KB