Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
17/04/2026, 04:33
General
- Target 2026-04-17_3c421904beaeebcb2c9b46b83dbceece_conti.exe
- Size 913KB
- Sample260417-e62rmaft8k
- SHA256 812e94bf9c5eab08ecde6df12a67b3e4bf50b9f64c47aee4f3b51d51cb1a802a
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 25 IoCs
- Suspicious use of UnmapMainImage 1 IoCs
- Suspicious use of WriteProcessMemory 20 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-17_3c421904beaeebcb2c9b46b83dbceece_conti.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-17_3c421904beaeebcb2c9b46b83dbceece_conti.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\dllhost.exeC:\Windows\System32\dllhost.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
u_240667671.dll
memory/892-4-0x0000000140000000-0x0000000140023000-memory.dmp
memory/892-7-0x0000000140000000-0x0000000140023000-memory.dmp
memory/892-6-0x0000000140000000-0x0000000140023000-memory.dmp
memory/892-9-0x0000000140000000-0x0000000140023000-memory.dmp
memory/1692-2-0x00007FF7BFC50000-0x00007FF7BFD3E000-memory.dmp
memory/3256-10-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-12-0x0000000000870000-0x0000000000880000-memory.dmp
memory/3256-11-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-13-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-14-0x00007FF95EF12000-0x00007FF95EF13000-memory.dmp
memory/3256-15-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-16-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-17-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-19-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-20-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-21-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-18-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-22-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-23-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-30-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-29-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-35-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-34-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-33-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-32-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-31-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-28-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-27-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-26-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-25-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-24-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-36-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-37-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-38-0x0000000000870000-0x0000000000880000-memory.dmp
memory/3256-39-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-41-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-40-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-42-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-43-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-44-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-47-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-46-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-45-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-48-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-49-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-50-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-51-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-54-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-58-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-57-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-59-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-56-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-55-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-53-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-52-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-61-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-60-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-62-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp
memory/3256-63-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-64-0x0000000000860000-0x0000000000870000-memory.dmp
memory/3256-65-0x00007FF95EE70000-0x00007FF95EF77000-memory.dmp