aa0bd1b3008a82118a3a8764407f6714ee3f2c2741b88413108ec512d21b7d48

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 19:00

Target
2026-07-02_fec9a5a52d86f667166a90c80f9b6c04_conti.exe
Size 18KB
Sample260702-xnz47acy21
SHA256 aa0bd1b3008a82118a3a8764407f6714ee3f2c2741b88413108ec512d21b7d48
MD5 fec9a5a52d86f667166a90c80f9b6c04
SHA1 51fe7b6513927fadd9160816190a3193803bf2df
SHA512 d8ddbb009d6476678dfbe89a42be57804d0eda96122b61ac3a6be732b57d8a7422156451e8bb2463fcc5a62e99dbb64c9253eb377b7383edbc0150b480d15312
SSDEEP 192:hfCyTUHg0Ja5VIliy16qlY5CqHnIB++6TXyMPrKV4xzF588q6Y4Yk3liCsz:JCy8gUbXY5CqoB0X9tF28q6lY6iCW
TLSH
T17282B64AB31380D8DE59D1B1D1E78B71EAA5BD610230A73B1314EA7A1F30893CB6E507
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5484 wrote to memory of 4624	5484	2026-07-02_fec9a5a52d86f667166a90c80f9b6c04_conti.exe	85

C:\Users\Admin\AppData\Local\Temp\2026-07-02_fec9a5a52d86f667166a90c80f9b6c04_conti.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-02_fec9a5a52d86f667166a90c80f9b6c04_conti.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5484
- C:\Windows\SYSTEM32\cmd.exe
  cmd.exe
  2⤵
  PID:4624