9a185b98119e97d9e7141f184a0b320c015dd151e76e5572b726de9f300b5f35

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 20:37

Target
2026-07-02_5af6b38879098b1235e60240c9adc451_conti.exe
Size 18KB
Sample260702-zedwpsev3z
SHA256 9a185b98119e97d9e7141f184a0b320c015dd151e76e5572b726de9f300b5f35
MD5 5af6b38879098b1235e60240c9adc451
SHA1 a8469e76e8ef90a5ffbc43250e0d7176a48cc1da
SHA512 85cd0e714f75d632cf8522c454ecc5568efbfbf7b65b82da8499cbf0e5efb3e6188121eebeb5238c518782f5f3e6d6d5a4d5555fdffbcb086b2b1a82cf6e2d8b
SSDEEP 192:BfCyTUHg0Ja5VIliy16qlY5CqHnIB++6TXyMPrKV4xzF588q6Y4Yk3liCsz:pCy8gUbXY5CqoB0X9tF28q6lY6iCW
TLSH
T14382B74AB31380D8DE59D1B1D1E78B75EAB5BD610230A73B1314EA7A1F30993CB6E507
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4504 wrote to memory of 2620	4504	2026-07-02_5af6b38879098b1235e60240c9adc451_conti.exe	87

C:\Users\Admin\AppData\Local\Temp\2026-07-02_5af6b38879098b1235e60240c9adc451_conti.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-02_5af6b38879098b1235e60240c9adc451_conti.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4504
- C:\Windows\SYSTEM32\cmd.exe
  cmd.exe
  2⤵
  PID:2620