20102026_0906_19102026_Dekont[.]rar

General

Target
20102026_0906_19102026_Dekont.rar
Size 990KB
Sample261020-k2thcaxycy
SHA256 2f9a56c2bd389d2a306625cb5a39ee2ecb66e4d67d8efc89c668dfc484b6472b
MD5 b5a46c1b053e20859e1c6bd7fc034dff
SHA1 9f8d5596b5bf82a8e07f185deabae70910c5d4c2
SHA512 5a823472fa687833673eda858c027a06c69ee49e588441f07e1ee8e7ac347440a53354222149690207c1e938288a0ad3cc826330d9f7a68cc4110c306663d195
SSDEEP 24576:x7ctLkCExouv6oCZCp8XLYlg6ulf6LBpT7JCotHgkH5ME8I:Ykvuzxgp80vXLBpT70otA4YI
TLSH
T1A4253302DE3027645A21067C2CEC29F92F8426B6F2E5B772E177811B9B3F2563478997
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Dekont.exe

File Explorer

20102026_0906_19102026_Dekont.rar

.rar 990KB
Dekont.exe

.exe 1.2MB

20102026_0906_19102026_Dekont.rar

SHA256 2f9a56c2bd389d2a306625cb5a39ee2ecb66e4d67d8efc89c668dfc484b6472b
MD5 b5a46c1b053e20859e1c6bd7fc034dff
SHA1 9f8d5596b5bf82a8e07f185deabae70910c5d4c2
SHA512 5a823472fa687833673eda858c027a06c69ee49e588441f07e1ee8e7ac347440a53354222149690207c1e938288a0ad3cc826330d9f7a68cc4110c306663d195
SSDEEP 24576:x7ctLkCExouv6oCZCp8XLYlg6ulf6LBpT7JCotHgkH5ME8I:Ykvuzxgp80vXLBpT70otA4YI
TLSH
T1A4253302DE3027645A21067C2CEC29F92F8426B6F2E5B772E177811B9B3F2563478997
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Dekont.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 38aa284ea16dbbd2189ec674eddea0ecb7210b6ffb0ec3b8979a64ebd3714821
MD5 fe84ef31a873bf7848aa8a836e21490e
SHA1 1044fcf2b678fe30103d8c7e9730a7800c23294d
SHA512 b968c3de21467cfcff2eb53f881d73be465b62cbfd8fc83e0a65f85e26f0840003f996f9b22d2758f74a82a5b89ff716c6a5439018d280c9af3e6009d8104f95
SSDEEP 24576:+QrABDSkA5uqTy/1LgKMNU5CEXXQFLkbJ1m3MZJz6Asfr3WYyj:+QABOkFqYkKMNU5vXEAJI8Pz6RfrA
TLSH
T1EE55021557E55B64F6BE9B386139212083F0F81ADB22E72E7DD81CED2FB1B80456132B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1295102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

20102026_0906_19102026_Dekont.rar

Dekont.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

20102026_0906_19102026_Dekont.rar

Dekont.exe

mscoree

dotnet