General
- Target 2026-07-05_342f76d711146152247d595dcfd6dde3_conti
- Size 95KB
- Sample260705-3e2jjsb16j
- SHA256 eaff4300ad2fd469fae8ec4ade2db1b50f43365a3c5ddc4702bf7d8a58565740
- MD5 342f76d711146152247d595dcfd6dde3
- SHA1 a618a19310353b019aea4d0f5f419e2c72bca57d
- SHA512 c91985a54920e37dc4cb6413958ec3e844f648c9f0aa42c0c5eae947cad48489b3469fc3019d3ac1014d3070c0b1bfd165cfa3064e6689fd2722107634d2c6c4
- SSDEEP 1536:L2/w0b7pcu+YnOnaDvCydOHHNxAkwxqkP7jCMNa+mLDfSn8z6YnaUtDZlHdZF2j0:L272u+fnyvCyd64kwxqkPc+mfSni6aa6
- TLSH T1EB935C17E68320FCC96BC074A6F65733F572B86501347A3E6794C7312E61EA1BF19A0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-05_342f76d711146152247d595dcfd6dde3_conti.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_342f76d711146152247d595dcfd6dde3_conti.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_342f76d711146152247d595dcfd6dde3_conti
- Size 95KB
- SHA256 eaff4300ad2fd469fae8ec4ade2db1b50f43365a3c5ddc4702bf7d8a58565740
- MD5 342f76d711146152247d595dcfd6dde3
- SHA1 a618a19310353b019aea4d0f5f419e2c72bca57d
- SHA512 c91985a54920e37dc4cb6413958ec3e844f648c9f0aa42c0c5eae947cad48489b3469fc3019d3ac1014d3070c0b1bfd165cfa3064e6689fd2722107634d2c6c4
- SSDEEP 1536:L2/w0b7pcu+YnOnaDvCydOHHNxAkwxqkP7jCMNa+mLDfSn8z6YnaUtDZlHdZF2j0:L272u+fnyvCyd64kwxqkPc+mfSni6aa6
- TLSH T1EB935C17E68320FCC96BC074A6F65733F572B86501347A3E6794C7312E61EA1BF19A0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Themida
-
Detects executables referencing many IR and analysis tools
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.