Overview

overview

10

Static

static

conti-0.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    conti-0.exe

  • Size

    101KB

  • Sample

    220214-3sk4qacael

  • MD5

    9eb9197cd58f4417a27621c4e1b25a71

  • SHA1

    b374eb643b20e47cd9c45811c09e4e73b5871506

  • SHA256

    004ede55a972e10d9a21bcf338b4907d6eed65bf5ad6abbbd5aec7d8484bdedf

  • SHA512

    d2eb60aa05487c879445669112b85f4870d04b48da6e4e7991ef72982dcd37bf44ac99c76423054f57e1703d4d9172ba0a8f129fc73ebdd15e4e7557a0ffec32

Score
10/10
contiransomware

Malware Config

Targets

    • Target

      conti-0.exe

    • Size

      101KB

    • MD5

      9eb9197cd58f4417a27621c4e1b25a71

    • SHA1

      b374eb643b20e47cd9c45811c09e4e73b5871506

    • SHA256

      004ede55a972e10d9a21bcf338b4907d6eed65bf5ad6abbbd5aec7d8484bdedf

    • SHA512

      d2eb60aa05487c879445669112b85f4870d04b48da6e4e7991ef72982dcd37bf44ac99c76423054f57e1703d4d9172ba0a8f129fc73ebdd15e4e7557a0ffec32

    Score
    10/10
    contiransomware

    • Conti Ransomware

      Ransomware generally thought to be a successor to Ryuk.

      ransomwareconti

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Drops desktop.ini file(s)

    behavioral1

MITRE ATT&CK Matrix

Tasks