Analysis

  • max time kernel
    123s
  • max time network
    122s
  • platform
    windows10_x64
  • resource
    win10-en-20211104
  • submitted
    17-11-2021 16:43

General

  • Target

    Coffee 1.16.220.exe

  • Size

    7.5MB

  • MD5

    ca07654a0459f528dba5ad054006ba77

  • SHA1

    fd9e8558ae27db2b09f1bfb057292280eec28920

  • SHA256

    56e5e14866628f021aec6abf3458faa488bac72c2666fdff8192cde7d17be376

  • SHA512

    8997ecf78a4e7272b4bddd4aaf6e061619f0d825d3a9642da91d7fbccd8bbf710828570eae4052c43e100b76b79133de8305d40fdb104e0d66a82e17890076c7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Coffee 1.16.220.exe
    "C:\Users\Admin\AppData\Local\Temp\Coffee 1.16.220.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/520-118-0x00007FF630DD0000-0x00007FF630DD1000-memory.dmp

    Filesize

    4KB

  • memory/520-120-0x000001BCFC1F0000-0x000001BCFC1F2000-memory.dmp

    Filesize

    8KB

  • memory/520-121-0x000001BCFC1F2000-0x000001BCFC1F4000-memory.dmp

    Filesize

    8KB

  • memory/520-122-0x000001BCFC1F4000-0x000001BCFC1F5000-memory.dmp

    Filesize

    4KB