ee2ad2e20582f55bf1f770795c07595b22505be9e9c7f6b491889b976e051532

Sharing

Copy URL Twitter E-mail

General

Target
ee2ad2e20582f55bf1f770795c07595b22505be9e9c7f6b491889b976e051532
Size 207KB
Sample220427-ssramaeggr
SHA256 ee2ad2e20582f55bf1f770795c07595b22505be9e9c7f6b491889b976e051532
MD5 dbd61226a3da2806edb46d17901c72c4
SHA1 c9d5825af10b2b15f62082cdc72e649cef9eeadf
SHA512 65e6fbdb26b286f101fa2526778d69706a7b0904b48706359e3e6cd69075d6099ac4eb946c9aaf4557f86eb1521e4113ca117c84ee308ae3fc29826d0c631214
SSDEEP 6144:tHjBB/tqQsbtBrNIDqvdsoLBCYG56S0rz6Ne:tHjH/tZ2Bcq2N8rz6U
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ee2ad2e20582f55bf1f770795c07595b22505be9e9c7f6b491889b976e051532

.zip 207KB
DEKONT.exe

.exe 611KB

ee2ad2e20582f55bf1f770795c07595b22505be9e9c7f6b491889b976e051532

SHA256 ee2ad2e20582f55bf1f770795c07595b22505be9e9c7f6b491889b976e051532
MD5 dbd61226a3da2806edb46d17901c72c4
SHA1 c9d5825af10b2b15f62082cdc72e649cef9eeadf
SHA512 65e6fbdb26b286f101fa2526778d69706a7b0904b48706359e3e6cd69075d6099ac4eb946c9aaf4557f86eb1521e4113ca117c84ee308ae3fc29826d0c631214
SSDEEP 6144:tHjBB/tqQsbtBrNIDqvdsoLBCYG56S0rz6Ne:tHjH/tZ2Bcq2N8rz6U
MD5 SHA1 SHA512 SSDEEP

DEKONT.exe

IMPHASH 1fa0792140f2864411d270a78aad275c
SHA256 d57b7809ae71b779b00aa2e7e3b55c3ff6c210453e19a872489e330285031ed3
MD5 da248e530b6e65e7457a6d472e0aeb47
SHA1 84ab397a9d4008c916666d9119e9fdc4b70d5642
SHA512 dfae1e4876df412dbe8137c725a99023485e9e9a8cfbbeeb2026015903ed1522b2d3b1f613c3f4107880c484ee2314907341edb77f1091c670dde4b1dbf47589
SSDEEP 6144:ZOjTNIn3/6DZsANvPBsFgIl2yvL49J48SDPbYzr/jK0+sja1Eo:YTCn3/69ZNHSH2yvL49JtwYXe0+sjab
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34120

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep VirtualProtect SetConsoleMode ReadConsoleInputA GetProcessHeap SetEndOfFile SetEnvironmentVariableA CompareStringW CreateFileW GetStringTypeW HeapSize CreateFileA CreateProcessA WaitForSingleObject GetExitCodeProcess HeapReAlloc HeapAlloc IsProcessorFeaturePresent WriteConsoleW SetStdHandle GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection GetProcAddress GetModuleHandleW ExitProcess DecodePointer GetLastError MoveFileA DeleteFileA GetCommandLineA HeapSetInformation HeapFree CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoW GetFileAttributesA RtlUnwind MultiByteToWideChar ReadFile LoadLibraryW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetModuleFileNameW SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId

ole32

RegisterDragDrop GetHGlobalFromStream CreateILockBytesOnHGlobal OleIsRunning MonikerRelativePathTo

rtutils

TraceGetConsoleW TracePrintfExW RouterLogEventW TraceDeregisterW RouterLogEventStringA RouterLogRegisterA

shell32

SHQueryRecycleBinA SHChangeNotify

resutils

ResUtilGetEnvironmentWithNetName ClusWorkerStart ResUtilGetProperty

setupapi

SetupInstallFromInfSectionW SetupDestroyDiskSpaceList SetupInstallFromInfSectionA