a949023db784c4bbd82a2ce3d6957a457efb81dae684dd92bfd3b7fce3b8f679 | Triage

Analysis

max time kernel
123s
max time network
122s
platform
windows10_x64
resource
win10-en-20211104
submitted
17-11-2021 16:43

Sharing

Report Analysis Logs

General

Target

Coffee 1.16.220.exe
Size

7.5MB
MD5

ca07654a0459f528dba5ad054006ba77
SHA1

fd9e8558ae27db2b09f1bfb057292280eec28920
SHA256

56e5e14866628f021aec6abf3458faa488bac72c2666fdff8192cde7d17be376
SHA512

8997ecf78a4e7272b4bddd4aaf6e061619f0d825d3a9642da91d7fbccd8bbf710828570eae4052c43e100b76b79133de8305d40fdb104e0d66a82e17890076c7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

Coffee 1.16.220.exe

pid process

520 Coffee 1.16.220.exe

C:\Users\Admin\AppData\Local\Temp\Coffee 1.16.220.exe
"C:\Users\Admin\AppData\Local\Temp\Coffee 1.16.220.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/520-118-0x00007FF630DD0000-0x00007FF630DD1000-memory.dmp

Filesize
4KB

Download
memory/520-120-0x000001BCFC1F0000-0x000001BCFC1F2000-memory.dmp

Filesize
8KB

Download
memory/520-121-0x000001BCFC1F2000-0x000001BCFC1F4000-memory.dmp

Filesize
8KB

Download
memory/520-122-0x000001BCFC1F4000-0x000001BCFC1F5000-memory.dmp

Filesize
4KB

Download