23102026_0404_22102026_Dekont ekte[.]exe[.]rar

General

Target
23102026_0404_22102026_Dekont ekte.exe.rar
Size 966KB
Sample261023-em2yaawvbw
SHA256 1a3f7535187d09382e1543b56045f6f574d46ef91b957f5ecd38b31112ec6f95
MD5 234dd2d010a7fa2dd7ef6f0e0f67d823
SHA1 d126eaf22bf845f80ce75c9cc61f4794a642b3d5
SHA512 52ce8b08f80a6513cafdfd9a23f19977f0b5fbb827004af1348a4cc8068c52b74484767e26363c0b86d4cd440618fc313ab04abf3c79f2360849255575918600
SSDEEP 24576:Arb2eYxGsxgAYW4BaXHBRXyufYItNfesiZz4PfiM8KmC+VFjF7r:WbPS/iJW8sHDhfYCgLCfi9rvVFjF
TLSH
T1E32533E4F5F1954A81F06B11A334C4574BF19C6E3CC68A3E25DDAC9860C7198EA9B0DF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Dekont ekte.exe

File Explorer

23102026_0404_22102026_Dekont ekte.exe.rar

.rar 966KB
Dekont ekte.exe

.exe 1.3MB

23102026_0404_22102026_Dekont ekte.exe.rar

SHA256 1a3f7535187d09382e1543b56045f6f574d46ef91b957f5ecd38b31112ec6f95
MD5 234dd2d010a7fa2dd7ef6f0e0f67d823
SHA1 d126eaf22bf845f80ce75c9cc61f4794a642b3d5
SHA512 52ce8b08f80a6513cafdfd9a23f19977f0b5fbb827004af1348a4cc8068c52b74484767e26363c0b86d4cd440618fc313ab04abf3c79f2360849255575918600
SSDEEP 24576:Arb2eYxGsxgAYW4BaXHBRXyufYItNfesiZz4PfiM8KmC+VFjF7r:WbPS/iJW8sHDhfYCgLCfi9rvVFjF
TLSH
T1E32533E4F5F1954A81F06B11A334C4574BF19C6E3CC68A3E25DDAC9860C7198EA9B0DF
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Dekont ekte.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 bcb777c4d880fc92a2e95eb04838dcc8de30ab31c9f7e448225a5a84d0535aee
MD5 8ad5d59b9d3cc06ea1ac68f88bf82ef1
SHA1 829f553b235bc6f90433edef151ec2c2aaddf71e
SHA512 f89e23bac350cd0931954b51bb89a3f2642ae1c3ed35f4c984986fe713167398c7f8801f59cfc0bf195d1b34e21f9e94bbe75bc4921b8fa805e17a50504f7ff9
SSDEEP 24576:IKoVW2eo6zKkbJblIYmADTIjN8m3ObKAv7MnJCwyAZhthsxr:zoUS7spjD8jNfXG/wt7t+r
TLSH
T1CC55F14813E80764F1BE9B7991F4159807F1F802DA73EB5D6EA921FA0D62B00DE96733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1349694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

23102026_0404_22102026_Dekont ekte.exe.rar

Dekont ekte.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

23102026_0404_22102026_Dekont ekte.exe.rar

Dekont ekte.exe

mscoree

dotnet