Analysis
-
max time kernel
122s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
10-10-2023 21:51
Static task
static1
Behavioral task
behavioral1
Sample
caffeine32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
caffeine32.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
caffeine64.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
caffeine64.exe
Resource
win10v2004-20230915-en
General
-
Target
caffeine32.exe
-
Size
325KB
-
MD5
6f6092c8c588dadebc6018ea5bacf7dd
-
SHA1
b22255e30e3a3c3effa7c2b6edeb084aa09c270a
-
SHA256
40e0fbf29eff616be93e22c20aef7a66e3f193b269c929571487d3f4b4133cdf
-
SHA512
f637a2077d50b02118595c465f786cf58ab52a843456abf358ca70ebc8ecab4dc4913742d2b17d7cb33e76feea1cbb72ecc7d78bbd393c4a874659002cef789c
-
SSDEEP
6144:L30lBQqLYc4l4S7bjvAhteO5fucKUQ1f+LOokTpa5uJhzmmjlC5:6LYPvAhtpfu3UQ1f+KokTp4mE5
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 4 IoCs
Processes:
caffeine32.exepid process 2200 caffeine32.exe 2200 caffeine32.exe 2200 caffeine32.exe 2200 caffeine32.exe -
Suspicious use of SendNotifyMessage 4 IoCs
Processes:
caffeine32.exepid process 2200 caffeine32.exe 2200 caffeine32.exe 2200 caffeine32.exe 2200 caffeine32.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
caffeine32.exepid process 2200 caffeine32.exe 2200 caffeine32.exe