Resubmissions
09/07/2026, 05:48
260709-ghkvbady7w609/07/2026, 05:40
260709-gc411ady6t809/07/2026, 05:36
260709-gavdsady5t6Analysis
- user interaction
yes - max time kernel
209s - max time network
185s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
09/07/2026, 05:48
General
- Target Doku.exe
- Size 35.4MB
- Sample260709-ghkvbady7w
- SHA256 57c9c02ef7a1560a13856376bf73f1596300e4e33c77764638befc93fbe79e9e
Malware Config
Signatures
- Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Drops file in Program Files directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Doku.exe"C:\Users\Admin\AppData\Local\Temp\Doku.exe"1⤵
- Drops file in Program Files directory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3012-0-0x000001EA440A0000-0x000001EA44F30000-memory.dmp
memory/3012-4-0x000001A9AC7D0000-0x000001A9AC800000-memory.dmp
memory/3012-8-0x000001A9AC6F0000-0x000001A9AC710000-memory.dmp
memory/3012-16-0x000001A9AE0D0000-0x000001A9AE120000-memory.dmp
memory/3012-12-0x000001EA430A0000-0x000001EA43140000-memory.dmp
memory/3012-21-0x000001EA431B0000-0x000001EA431D0000-memory.dmp
memory/3012-25-0x000001EA45180000-0x000001EA451B0000-memory.dmp
memory/3012-37-0x000001EA451D0000-0x000001EA451F0000-memory.dmp
memory/3012-33-0x000001A9AE120000-0x000001A9AE130000-memory.dmp
memory/3012-29-0x000001EA451B0000-0x000001EA451D0000-memory.dmp
memory/3012-41-0x000001EA46C20000-0x000001EA46C50000-memory.dmp
memory/3012-57-0x000001EA47100000-0x000001EA472C0000-memory.dmp
memory/3012-45-0x000001EA46CF0000-0x000001EA46D30000-memory.dmp
memory/3012-65-0x000001EA472C0000-0x000001EA47310000-memory.dmp
memory/3012-61-0x000001EA46E70000-0x000001EA46E90000-memory.dmp
memory/3012-53-0x000001EA46E30000-0x000001EA46E70000-memory.dmp
memory/3012-49-0x000001EA46DD0000-0x000001EA46E30000-memory.dmp
memory/3012-69-0x000001EA47760000-0x000001EA47810000-memory.dmp
memory/3012-77-0x000001EA46EB0000-0x000001EA46ED0000-memory.dmp
memory/3012-81-0x000001EA47880000-0x000001EA478F0000-memory.dmp
memory/3012-73-0x000001EA47B10000-0x000001EA47D20000-memory.dmp
memory/3012-89-0x000001EA47670000-0x000001EA47690000-memory.dmp
memory/3012-85-0x000001EA47E00000-0x000001EA47E90000-memory.dmp
memory/3012-97-0x000001EA47D20000-0x000001EA47D40000-memory.dmp
memory/3012-93-0x000001EA47E90000-0x000001EA47EC0000-memory.dmp
memory/3012-101-0x000001EA47F90000-0x000001EA47FC0000-memory.dmp