Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/08/2026, 09:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
df8dbef4350697cb2d1bbbdfcf223174382798e970ed6bcb371f6e41d0b752bc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
df8dbef4350697cb2d1bbbdfcf223174382798e970ed6bcb371f6e41d0b752bc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target df8dbef4350697cb2d1bbbdfcf223174382798e970ed6bcb371f6e41d0b752bc.exe
- Size 789KB
- Sample260819-ls36vstset
- SHA256 df8dbef4350697cb2d1bbbdfcf223174382798e970ed6bcb371f6e41d0b752bc
- MD5 405099d6ad2603deef5662472dcc75d7
- SHA1 35f0b75608a52d44e144b902cf55f6e3b6a90cbb
- SHA512 896f2f5f6efcd2820228baf797c457503b07a09021da0346bdf117d7d139109c2925e9e8d320f8107277a631b21b7a7d419dc9c0cbb5c323da65e954a0bee3a9
- SSDEEP 24576:eaVhxQ5QLGlTHZpkcZx1dMXqqMGT5WM2u:eaLxQQGdpkcL1dMV94
- TLSH T18D05AE17664941EFDCC185F6C8950EBF5E6A7C2A37A141FF33A0335DEE32A9118299B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Family: Coffloader
Coffloader is an open-source beacon loader written in C.
- Detects Coffloader 4 IoCs
resource yara_rule behavioral2/memory/4256-0-0x000001B7F1990000-0x000001B7F1A01000-memory.dmp family_coffloader behavioral2/memory/4256-1-0x000001B7F1990000-0x000001B7F1A01000-memory.dmp family_coffloader behavioral2/memory/4256-2-0x000001B7F1990000-0x000001B7F1A01000-memory.dmp family_coffloader behavioral2/memory/4256-3-0x000001B7F1990000-0x000001B7F1A01000-memory.dmp family_coffloader - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4256 df8dbef4350697cb2d1bbbdfcf223174382798e970ed6bcb371f6e41d0b752bc.exe 4256 df8dbef4350697cb2d1bbbdfcf223174382798e970ed6bcb371f6e41d0b752bc.exe