0fdc85e04d2ebb6e8038a97cd28120dab561740c3465fc9663f96e0085cd0318

Analysis

max time kernel
149s
max time network
101s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/04/2026, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe
Size 858KB
Sample260423-e7fksaay8s
SHA256 0fdc85e04d2ebb6e8038a97cd28120dab561740c3465fc9663f96e0085cd0318
MD5 24d8ac16909145c310a05907e7a82f47
SHA1 db2f76286a61a877b8054a0ca63bf576092e4284
SHA512 1827215217274af2d10a32e68a2eb8ab1574458f579ea7ddcbdb40e76ea1cd5e73c0a57690c4fdeee6f29d075f02b6c473ed6a03910303541548867dfc938905
SSDEEP 12288:d0oY6HPSTe3G42XJYP/fXvzrzrfhB3572FnGfCO0j7SHlQFKxgg9U:Sx66TeXAJYP//PfYXO0jMxgg9U
TLSH
T1A815498276DB0CF9EA936B3854EF63366735FE708B2A8F274514D2312C139D0AD1AB54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2148 set thread context of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80
PID 2148 wrote to memory of 3432	2148	2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe	80

C:\Users\Admin\AppData\Local\Temp\2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-23_24d8ac16909145c310a05907e7a82f47_conti.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2148
- C:\Windows\System32\dllhost.exe
  "C:\Windows\System32\dllhost.exe"
  2⤵
  PID:3432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2148-5-0x00007FF6EEE40000-0x00007FF6EEEC8000-memory.dmp

Download

memory/2148-0-0x00007FF96BB40000-0x00007FF96BD49000-memory.dmp

Download

memory/3432-3-0x0000000140000000-0x0000000140023000-memory.dmp

Download

memory/3432-1-0x0000000140000000-0x0000000140023000-memory.dmp

Download

memory/3432-4-0x0000000140000000-0x0000000140023000-memory.dmp

Download

memory/3432-6-0x0000000140000000-0x0000000140023000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads