Analysis
-
max time kernel
144s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
18-05-2024 11:55
Static task
static1
Behavioral task
behavioral1
Sample
caffeine32.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
caffeine32.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
caffeine64.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
caffeine64.exe
Resource
win10v2004-20240508-en
General
-
Target
caffeine64.exe
-
Size
423KB
-
MD5
94eb3de6900dfa5c1165cfe416096a72
-
SHA1
a098e25990ad1f0e8bedb0764ab63f6ba5fc5926
-
SHA256
c0593b4b65bb264a982d61a7b84f38b10a41972b49a217ef3a80a906a0c4ee08
-
SHA512
01c1ecddd30af98488668ed53cff9afb02ebe6262e88ccef34353baff133ed06ac395609a6194c1b9b2b42bafe8707fe6494c8ef88bd574472c643aebe211a24
-
SSDEEP
6144:E41JKq9T+/k5AgVHDljl5g/dObY34CkfSy5rJUgj2TpgdEhpNACHXivi5:ja0+/i9Tl5gmYrMSy5uuEzHXv5
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 4 IoCs
Processes:
caffeine64.exepid process 4980 caffeine64.exe 4980 caffeine64.exe 4980 caffeine64.exe 4980 caffeine64.exe -
Suspicious use of SendNotifyMessage 4 IoCs
Processes:
caffeine64.exepid process 4980 caffeine64.exe 4980 caffeine64.exe 4980 caffeine64.exe 4980 caffeine64.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
caffeine64.exepid process 4980 caffeine64.exe 4980 caffeine64.exe