General
- Target 2026-06-27_dda1dbdcddbcaa989d57d09a4831ed02_conti
- Size 83KB
- Sample260629-cmb1rab17p
- SHA256 13f891e88d0764f1758150e63d3ccf3e60604e3bfe3e4ffcaa0153ca56a8bbeb
- MD5 dda1dbdcddbcaa989d57d09a4831ed02
- SHA1 8c611d2774856648be564b035f0d199f7b999d4f
- SHA512 7e6f581f1acc6f7388c33677130b483f6fabeac57acbe6ed4c29b7cfddd971f6171ced168ba0738d9ec7121e1882f919adf382761b0207efbf54ed1a50d3417c
- SSDEEP 1536:rLVxAMBX/m58NLJkwxzBnRfCMaI4qmNj81pofEcCs17dbYj3q4WfsLe6607Wvn:rLVxAMBX/HDkwxzB5W3qmNNEcCwFsM0g
- TLSH T1DA836C16F293A0FCEA16C07445DA1673E972BC6A01309F3EE783EB341E34D51AE99619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_dda1dbdcddbcaa989d57d09a4831ed02_conti.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_dda1dbdcddbcaa989d57d09a4831ed02_conti.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_dda1dbdcddbcaa989d57d09a4831ed02_conti
- Size 83KB
- SHA256 13f891e88d0764f1758150e63d3ccf3e60604e3bfe3e4ffcaa0153ca56a8bbeb
- MD5 dda1dbdcddbcaa989d57d09a4831ed02
- SHA1 8c611d2774856648be564b035f0d199f7b999d4f
- SHA512 7e6f581f1acc6f7388c33677130b483f6fabeac57acbe6ed4c29b7cfddd971f6171ced168ba0738d9ec7121e1882f919adf382761b0207efbf54ed1a50d3417c
- SSDEEP 1536:rLVxAMBX/m58NLJkwxzBnRfCMaI4qmNj81pofEcCs17dbYj3q4WfsLe6607Wvn:rLVxAMBX/HDkwxzB5W3qmNNEcCwFsM0g
- TLSH T1DA836C16F293A0FCEA16C07445DA1673E972BC6A01309F3EE783EB341E34D51AE99619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.