Overview

overview

8

Static

static

DEKONT_P.EXE

windows7_x64

8

DEKONT_P.EXE

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    DEKONT_P.EXE
  • Size 875KB
  • Sample200921-rtmmbgdtn2
  • SHA256 09bdb0fb2e5689963f8375783abf0d87d2dbccc6a7ed8b03d7a53af29ab2c4d6
  • MD5 SHA1 SHA512
Score
8/10
spyware

Malware Config

Targets

    • Target
      DEKONT_P.EXE
    • Size 875KB
    • SHA256 09bdb0fb2e5689963f8375783abf0d87d2dbccc6a7ed8b03d7a53af29ab2c4d6
    • MD5 SHA1 SHA512
    Score
    8/10
    spyware

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks