Overview

overview

10

Static

static

3

DEKONT.exe

windows10-ltsc_2021-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    DEKONT.rar
  • Size 991KB
  • Sample260908-fr7j1adj41
  • SHA256 3d7b1c2f030eb73ca46f63e398ab46da2f188a94082bfe8d2101c772d10f0ae7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
formbookdiscoveryratspywarestealertrojan

Malware Config

Targets

    • Target
      DEKONT.exe
    • Size 1.0MB
    • SHA256 3a443ae549e3021569617aa3b96cfcaebf013307b34179caf0c8165b8526a895
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryformbookratspywarestealertrojan

    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks