Overview
overview
8Static
static
8FateInjector.exe
windows7_x64
1FateInjector.exe
windows10_x64
1Ambrosial ...21.exe
windows7_x64
8Ambrosial ...21.exe
windows10_x64
8Ambrosial.exe
windows7_x64
4Ambrosial.exe
windows10_x64
7Release_Ve...on.dll
windows7_x64
1Release_Ve...on.dll
windows10_x64
3BadManPublic.dll
windows7_x64
1BadManPublic.dll
windows10_x64
1HorionInjector.exe
windows7_x64
8HorionInjector.exe
windows10_x64
8MetroSet UI.dll
windows7_x64
1MetroSet UI.dll
windows10_x64
1Newtonsoft.Json.dll
windows7_x64
1Newtonsoft.Json.dll
windows10_x64
1System.Run...fe.dll
windows7_x64
1System.Run...fe.dll
windows10_x64
1ure tyjk5_...]_.exe
windows7_x64
1ure tyjk5_...]_.exe
windows10_x64
1Coffee (1).exe
windows7_x64
1Coffee (1).exe
windows10_x64
1Coffee 1.16.220.exe
windows7_x64
1Coffee 1.16.220.exe
windows10_x64
1Coffee NOT...ON.exe
windows7_x64
1Coffee NOT...ON.exe
windows10_x64
1Fate.Client.dll
windows7_x64
3Fate.Client.dll
windows10_x64
3FateInjector.exe
windows7_x64
1FateInjector.exe
windows10_x64
1Fate.Client.dll
windows7_x64
3Fate.Client.dll
windows10_x64
1Analysis
-
max time kernel
123s -
max time network
122s -
platform
windows10_x64 -
resource
win10-en-20211104 -
submitted
17-11-2021 16:43
Static task
static1
Behavioral task
behavioral1
Sample
FateInjector.exe
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
FateInjector.exe
Resource
win10-en-20211104
Behavioral task
behavioral3
Sample
Ambrosial 1.16.221.exe
Resource
win7-en-20211104
Behavioral task
behavioral4
Sample
Ambrosial 1.16.221.exe
Resource
win10-en-20211014
Behavioral task
behavioral5
Sample
Ambrosial.exe
Resource
win7-en-20211104
Behavioral task
behavioral6
Sample
Ambrosial.exe
Resource
win10-en-20211014
Behavioral task
behavioral7
Sample
Release_Version/version.dll
Resource
win7-en-20211104
Behavioral task
behavioral8
Sample
Release_Version/version.dll
Resource
win10-en-20211104
Behavioral task
behavioral9
Sample
BadManPublic.dll
Resource
win7-en-20211014
Behavioral task
behavioral10
Sample
BadManPublic.dll
Resource
win10-en-20211104
Behavioral task
behavioral11
Sample
HorionInjector.exe
Resource
win7-en-20211014
Behavioral task
behavioral12
Sample
HorionInjector.exe
Resource
win10-en-20211104
Behavioral task
behavioral13
Sample
MetroSet UI.dll
Resource
win7-en-20211014
Behavioral task
behavioral14
Sample
MetroSet UI.dll
Resource
win10-en-20211104
Behavioral task
behavioral15
Sample
Newtonsoft.Json.dll
Resource
win7-en-20211104
Behavioral task
behavioral16
Sample
Newtonsoft.Json.dll
Resource
win10-en-20211014
Behavioral task
behavioral17
Sample
System.Runtime.CompilerServices.Unsafe.dll
Resource
win7-en-20211104
Behavioral task
behavioral18
Sample
System.Runtime.CompilerServices.Unsafe.dll
Resource
win10-en-20211014
Behavioral task
behavioral19
Sample
ure tyjk5_[unknowncheats.me]_.exe
Resource
win7-en-20211104
Behavioral task
behavioral20
Sample
ure tyjk5_[unknowncheats.me]_.exe
Resource
win10-en-20211014
Behavioral task
behavioral21
Sample
Coffee (1).exe
Resource
win7-en-20211104
Behavioral task
behavioral22
Sample
Coffee (1).exe
Resource
win10-en-20211104
Behavioral task
behavioral23
Sample
Coffee 1.16.220.exe
Resource
win7-en-20211014
Behavioral task
behavioral24
Sample
Coffee 1.16.220.exe
Resource
win10-en-20211104
Behavioral task
behavioral25
Sample
Coffee NOT SURE VERSION.exe
Resource
win7-en-20211014
Behavioral task
behavioral26
Sample
Coffee NOT SURE VERSION.exe
Resource
win10-en-20211104
Behavioral task
behavioral27
Sample
Fate.Client.dll
Resource
win7-en-20211014
Behavioral task
behavioral28
Sample
Fate.Client.dll
Resource
win10-en-20211104
Behavioral task
behavioral29
Sample
FateInjector.exe
Resource
win7-en-20211104
Behavioral task
behavioral30
Sample
FateInjector.exe
Resource
win10-en-20211014
Behavioral task
behavioral31
Sample
Fate.Client.dll
Resource
win7-en-20211104
Behavioral task
behavioral32
Sample
Fate.Client.dll
Resource
win10-en-20211014
General
-
Target
Coffee 1.16.220.exe
-
Size
7.5MB
-
MD5
ca07654a0459f528dba5ad054006ba77
-
SHA1
fd9e8558ae27db2b09f1bfb057292280eec28920
-
SHA256
56e5e14866628f021aec6abf3458faa488bac72c2666fdff8192cde7d17be376
-
SHA512
8997ecf78a4e7272b4bddd4aaf6e061619f0d825d3a9642da91d7fbccd8bbf710828570eae4052c43e100b76b79133de8305d40fdb104e0d66a82e17890076c7
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
Coffee 1.16.220.exepid process 520 Coffee 1.16.220.exe