Analysis

  • max time kernel
    144s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    21-05-2022 11:33

General

  • Target

    dokaz o uplati.exe

  • Size

    544KB

  • MD5

    fd7ab257e104265969b3abcf5e1f8e94

  • SHA1

    b0b9b3798b255d9fc1f09152637284aca59da65a

  • SHA256

    61e1401e8c06b9d1c5c15155a7ef7559040c9d8fbb26e5d11c6dcaf0aa191e4d

  • SHA512

    e7fd0d54b7ba8cc4013175f4654ebb1f1bf0e419d622cce4ff9f7182eb535581252e7927b416de3ae1a7e09e34d42d4e0d1fae69f6ca1ba566945082a72f2979

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\dokaz o uplati.exe
    "C:\Users\Admin\AppData\Local\Temp\dokaz o uplati.exe"
    1⤵
      PID:1676
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1676 -s 1404
        2⤵
        • Program crash
        PID:3684
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1676 -ip 1676
      1⤵
        PID:4048

      Network

      MITRE ATT&CK Matrix ATT&CK v6

      Command and Control

      Web Service

      1
      T1102

      Replay Monitor

      Loading Replay Monitor...

      Downloads