General
- Target 2026-07-03_fb454d137f460a15f4d2a1b11b6aa8be_conti
- Size 31KB
- Sample260703-az8jdady8p
- SHA256 681afb77eeccb9d3a8d0a1c978914aec0288e6d8fccde06efcdcfda35cbc7f7b
- MD5 fb454d137f460a15f4d2a1b11b6aa8be
- SHA1 b211b6c16bbdf412000bc72ca751e978d89bb67a
- SHA512 2145431aa81bb3f43845f1013922a278205c5c4d07063752197d5203fc26e9f0d68ec4160f492e50c092b1e829caf9d859518338648914790e61c41065a6d5d3
- SSDEEP 384:CbXtzeu5hozog+Sntu3uI4oMTKU4bANj4Opi6aFcskHSYkVPMACW:StgP+SMepoMmSrpVaFcskHEVPaW
- TLSH T1A2E2E61EB29340D9CAA5E275E1FA5332F571F82606393B3E0708D67D7D61D82A23E907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_fb454d137f460a15f4d2a1b11b6aa8be_conti.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_fb454d137f460a15f4d2a1b11b6aa8be_conti.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_fb454d137f460a15f4d2a1b11b6aa8be_conti
- Size 31KB
- SHA256 681afb77eeccb9d3a8d0a1c978914aec0288e6d8fccde06efcdcfda35cbc7f7b
- MD5 fb454d137f460a15f4d2a1b11b6aa8be
- SHA1 b211b6c16bbdf412000bc72ca751e978d89bb67a
- SHA512 2145431aa81bb3f43845f1013922a278205c5c4d07063752197d5203fc26e9f0d68ec4160f492e50c092b1e829caf9d859518338648914790e61c41065a6d5d3
- SSDEEP 384:CbXtzeu5hozog+Sntu3uI4oMTKU4bANj4Opi6aFcskHSYkVPMACW:StgP+SMepoMmSrpVaFcskHEVPaW
- TLSH T1A2E2E61EB29340D9CAA5E275E1FA5332F571F82606393B3E0708D67D7D61D82A23E907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE