Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
18-05-2024 11:55
Static task
static1
Behavioral task
behavioral1
Sample
caffeine32.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
caffeine32.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
caffeine64.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
caffeine64.exe
Resource
win10v2004-20240508-en
General
-
Target
caffeine32.exe
-
Size
325KB
-
MD5
6f6092c8c588dadebc6018ea5bacf7dd
-
SHA1
b22255e30e3a3c3effa7c2b6edeb084aa09c270a
-
SHA256
40e0fbf29eff616be93e22c20aef7a66e3f193b269c929571487d3f4b4133cdf
-
SHA512
f637a2077d50b02118595c465f786cf58ab52a843456abf358ca70ebc8ecab4dc4913742d2b17d7cb33e76feea1cbb72ecc7d78bbd393c4a874659002cef789c
-
SSDEEP
6144:L30lBQqLYc4l4S7bjvAhteO5fucKUQ1f+LOokTpa5uJhzmmjlC5:6LYPvAhtpfu3UQ1f+KokTp4mE5
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 4 IoCs
Processes:
caffeine32.exepid process 184 caffeine32.exe 184 caffeine32.exe 184 caffeine32.exe 184 caffeine32.exe -
Suspicious use of SendNotifyMessage 4 IoCs
Processes:
caffeine32.exepid process 184 caffeine32.exe 184 caffeine32.exe 184 caffeine32.exe 184 caffeine32.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
caffeine32.exepid process 184 caffeine32.exe 184 caffeine32.exe