General
- Target 2026-07-04_970cc9fac6418ef8eabf1ca1b77bce21_conti
- Size 29KB
- Sample260705-ap998afw7t
- SHA256 d8048bfe8322fc50999dc033cb20a9f924cea258172205505844dfabb272f92d
- MD5 970cc9fac6418ef8eabf1ca1b77bce21
- SHA1 1b540274c716b71c25d3f889627968ee957e5daa
- SHA512 519cd5685662926a7d5c8fc2974ce8acb4c9525e4443add7a44527a3434244f12f9bd765e2f6df64714ffc8fc17267db5d33807c6369ea7ed6b9a8a3f7f8991b
- SSDEEP 384:Ng0fROB7zZLU4d1mSgi7UttoU4sKtogncOpi6r3HSYkVPMACW:t5OBnBtf4tY5tTpVr3HEVPaW
- TLSH T1FFD21B5B629200F8C869D272E6F65333B670F4121A392B6E1758C73B7E60951A37ED07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_970cc9fac6418ef8eabf1ca1b77bce21_conti.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_970cc9fac6418ef8eabf1ca1b77bce21_conti.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_970cc9fac6418ef8eabf1ca1b77bce21_conti
- Size 29KB
- SHA256 d8048bfe8322fc50999dc033cb20a9f924cea258172205505844dfabb272f92d
- MD5 970cc9fac6418ef8eabf1ca1b77bce21
- SHA1 1b540274c716b71c25d3f889627968ee957e5daa
- SHA512 519cd5685662926a7d5c8fc2974ce8acb4c9525e4443add7a44527a3434244f12f9bd765e2f6df64714ffc8fc17267db5d33807c6369ea7ed6b9a8a3f7f8991b
- SSDEEP 384:Ng0fROB7zZLU4d1mSgi7UttoU4sKtogncOpi6r3HSYkVPMACW:t5OBnBtf4tY5tTpVr3HEVPaW
- TLSH T1FFD21B5B629200F8C869D272E6F65333B670F4121A392B6E1758C73B7E60951A37ED07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE