General
- Target 2026-03-13_e0d92d3fd174f6702b4cadaf2e1c563a_conti
- Size 229KB
- Sample260313-gdccdahy9z
- SHA256 46c158f72eb92e5affe8023805af152cffa1eb865d89365060a28a488713d45f
- MD5 e0d92d3fd174f6702b4cadaf2e1c563a
- SHA1 8f1eaf7061a828324254042a6a77759d99fcae45
- SHA512 494e3a637027f428eb4f4be04a699f31d73129fdaad1b8b6b70717afc1826855464591573cbb8aa8b75893274355d3a7b102e986c83916ab3fc5b2fa7a889e88
- SSDEEP 3072:R0P5ignCtsvc+6yR5eyZsp5ctzZQm/8Y/ITWdzSdlkwxPKTEwYBm+rCrMgjarm9l:R6ignCts1PBxtrA9xMMknl
- TLSH T1C434C515F7EB24ACF1B3C6789E93537298B9FC249130F86E626151513E16A30EF2CB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-03-13_e0d92d3fd174f6702b4cadaf2e1c563a_conti.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-03-13_e0d92d3fd174f6702b4cadaf2e1c563a_conti.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-03-13_e0d92d3fd174f6702b4cadaf2e1c563a_conti
- Size 229KB
- SHA256 46c158f72eb92e5affe8023805af152cffa1eb865d89365060a28a488713d45f
- MD5 e0d92d3fd174f6702b4cadaf2e1c563a
- SHA1 8f1eaf7061a828324254042a6a77759d99fcae45
- SHA512 494e3a637027f428eb4f4be04a699f31d73129fdaad1b8b6b70717afc1826855464591573cbb8aa8b75893274355d3a7b102e986c83916ab3fc5b2fa7a889e88
- SSDEEP 3072:R0P5ignCtsvc+6yR5eyZsp5ctzZQm/8Y/ITWdzSdlkwxPKTEwYBm+rCrMgjarm9l:R6ignCts1PBxtrA9xMMknl
- TLSH T1C434C515F7EB24ACF1B3C6789E93537298B9FC249130F86E626151513E16A30EF2CB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing URLs to raw contents of a Github gist
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.