General
- Target caffeine.zip
- Size 309KB
- Sample260708-phm9fagv8p
- SHA256 4a259c348e59eb51bbb75aac7fdcc798705496d575892ee1e01fff6970d5ba1c
- MD5 11dd04e28827dee752086e065b4bae63
- SHA1 189311d504383d09752e0e209e0230870c044f47
- SHA512 0f9ee4d1a49e639c6a8a4fb5d23883a60b9ca55663145cec6b901e2fc8f0999ee7a18cf07ab2b23722c5da5ac286df62fab5dc7833898689048b330b4e7591c8
- SSDEEP 6144:jR6ycL+5kpIbAUcOi3cQm55tuSeMBXshyJzUM3eq0cOjh5bQQZnv6wPKva:j9LbAUBFQm5nuZGXsyJ10cah5bnHKva
- TLSH T14364237F389ACC2107976BB32551684572437D6F63466441F9A348884AC0CFABBEEE4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
caffeine32.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
caffeine32.exe
Resource
win11ltsc2024-20260706-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
caffeine64.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
caffeine64.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target caffeine32.exe
- Size 329KB
- SHA256 327fe70ed4f6502ebf8f3d4c5f890960eb7a357529c14f078999829b6f78fb9d
- MD5 8d7cf3327e453c4ccbed57dc673913f3
- SHA1 958d2532ee723eee84d8c504298b0927ecd94314
- SHA512 ea0f321dafab795ad40c746afc6988c680ea5c3e119e305275a8de0ccf30dfc4553bb89802c5056c6186ac4f90e47b01315795f3811966167a1f41a1f62e8009
- SSDEEP 6144:/NPcpV1DsccVapFF/gTVNlPO1fTLj4RPFcH/6UJ:osc2TVjPO1fT/4RPF6J
- TLSH T17A742A5177D08033D9A136320862C7366669BC666F3286C766D4BE3FBD38D91B93630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target caffeine64.exe
- Size 428KB
- SHA256 98c0af01b4257e12679aaba3c148cdc95c9168f95ad17add25287a584d9070bf
- MD5 ce56a51f3a3caca491fc9243d08e2b00
- SHA1 80ef8f6c8b1c8157fd1e9b0a01aba31389b7d37d
- SHA512 6ce4915a75f48f2d69a96070e863454056f9e65aea561d6e7f10fd2e6d240482a0738b285e33f75e0bc0bfa87a581791f8a94d4eaf4abe293f5e2f50b267e381
- SSDEEP 6144:zjtlf+TIj5l0LRI196yF8+k8mEbVrYo3DBxrxNf/XFnb478okzhg1111111lPC:fWT45l0tN+k8vrp1xrxNXl4ormC
- TLSH T106944B46F7A054F2E46252398862C76AE3717C9A5B3183CF12D5BB1F3F37A906C2A315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.