Analysis
- max time kernel
136s - max time network
50s - platform
windows10_x64 - resource
win10v200430 - submitted
13/07/2020, 11:41
Static task
static1
Behavioral task
behavioral1
Sample
Dekont.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Dekont.exe
Resource
win10v200430
0 signatures
0 seconds
General
- Target Dekont.exe
- Size 771KB
- Sample200713-5vy6475jtx
- SHA256 8f560b247ad96f57de4e2f6da3d99af31a7ac8478e560c6fbfaa1d3615e65575
- MD5 e6e0c9a9a19145589f731d7380544b97
- SHA1 16c015e77df27881bfd08e50a2e1257ddbec8503
- SHA512 07ce4fd45b62a2a2fc07527c16b869fe86ab0c5081cbae77a79301d368b456a6607880d3a6d28adbc74f2a5c5f2c4f263eeb87f84e65e220c934d82fb952b31a
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2804 Dekont.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2804 Dekont.exe