General
- Target 2026-07-01_626153bc61a8b1748180ffb553c687e8_conti
- Size 763KB
- Sample260701-x1bblac17l
- SHA256 2eddf8e660b78b31c0799f4c63c2f8aef52172ae6b8020bc830e7223e8ad095a
- MD5 626153bc61a8b1748180ffb553c687e8
- SHA1 b4b313074d254dba58c63ca453efa1f31e16e744
- SHA512 82a72e9967ad25a3a054fa3c240b0d85819fb4304fd0e34f862b1a8126d3c9884ae16e6dc042c1d779216cc34ef0c4baf011cb563e2f66490efec1ef7ad6b573
- SSDEEP 12288:Rc88xZj7W2IQdAyEooM4oFDNHBFASHFQFK50jUfEoVl:R+jKZQeyHoSV50jUfEoVl
- TLSH T1C3F4178336CA1CFAEE932B3894DF533A6735FE708B6A8B674514D2321D135C1AD1AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_626153bc61a8b1748180ffb553c687e8_conti.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_626153bc61a8b1748180ffb553c687e8_conti.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_626153bc61a8b1748180ffb553c687e8_conti
- Size 763KB
- SHA256 2eddf8e660b78b31c0799f4c63c2f8aef52172ae6b8020bc830e7223e8ad095a
- MD5 626153bc61a8b1748180ffb553c687e8
- SHA1 b4b313074d254dba58c63ca453efa1f31e16e744
- SHA512 82a72e9967ad25a3a054fa3c240b0d85819fb4304fd0e34f862b1a8126d3c9884ae16e6dc042c1d779216cc34ef0c4baf011cb563e2f66490efec1ef7ad6b573
- SSDEEP 12288:Rc88xZj7W2IQdAyEooM4oFDNHBFASHFQFK50jUfEoVl:R+jKZQeyHoSV50jUfEoVl
- TLSH T1C3F4178336CA1CFAEE932B3894DF533A6735FE708B6A8B674514D2321D135C1AD1AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10UAC bypass
- Custom signature
Detects command variations typically used by ransomware
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Disables cmd.exe use via registry modification
Possible privilege escalation attempt
Modifies file permissions
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
2Windows Service
2