Analysis
-
max time kernel
91s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
25-10-2023 18:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
caffeine32.exe
Resource
win10v2004-20231020-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
caffeine64.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
caffeine32.exe
-
Size
325KB
-
MD5
6f6092c8c588dadebc6018ea5bacf7dd
-
SHA1
b22255e30e3a3c3effa7c2b6edeb084aa09c270a
-
SHA256
40e0fbf29eff616be93e22c20aef7a66e3f193b269c929571487d3f4b4133cdf
-
SHA512
f637a2077d50b02118595c465f786cf58ab52a843456abf358ca70ebc8ecab4dc4913742d2b17d7cb33e76feea1cbb72ecc7d78bbd393c4a874659002cef789c
-
SSDEEP
6144:L30lBQqLYc4l4S7bjvAhteO5fucKUQ1f+LOokTpa5uJhzmmjlC5:6LYPvAhtpfu3UQ1f+KokTp4mE5
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 4 IoCs
Processes:
caffeine32.exepid process 4224 caffeine32.exe 4224 caffeine32.exe 4224 caffeine32.exe 4224 caffeine32.exe -
Suspicious use of SendNotifyMessage 4 IoCs
Processes:
caffeine32.exepid process 4224 caffeine32.exe 4224 caffeine32.exe 4224 caffeine32.exe 4224 caffeine32.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
caffeine32.exepid process 4224 caffeine32.exe 4224 caffeine32.exe