General

  • Target
    2026-07-01_626153bc61a8b1748180ffb553c687e8_conti
  • Size 763KB
  • Sample260701-x1bblac17l
  • SHA256 2eddf8e660b78b31c0799f4c63c2f8aef52172ae6b8020bc830e7223e8ad095a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-01_626153bc61a8b1748180ffb553c687e8_conti
    • Size 763KB
    • SHA256 2eddf8e660b78b31c0799f4c63c2f8aef52172ae6b8020bc830e7223e8ad095a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies Windows Defender DisableAntiSpyware settings

    • Modifies Windows Defender TamperProtection settings

    • Custom signature

      Detects command variations typically used by ransomware

    • Custom signature

      Detects executables embedding registry key / value combination indicative of disabling Windows Defen

    • Disables cmd.exe use via registry modification

    • Possible privilege escalation attempt

    • Modifies file permissions

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks