Analysis
- max time kernel
149s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
05/07/2026, 01:20
General
- Target 2026-07-05_9a403b4dbb2b00719c5b7131b6397c05_conti.exe
- Size 310KB
- Sample260705-bp88labx5j
- SHA256 de4eb68862cf5900d399aadef973f5968aaae1320d4e62b8abdda0b2a5aaf98a
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-05_9a403b4dbb2b00719c5b7131b6397c05_conti.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-05_9a403b4dbb2b00719c5b7131b6397c05_conti.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\2026-07-05_9a403b4dbb2b00719c5b7131b6397c05_conti.exeC:\Users\Admin\AppData\Local\Temp\2026-07-05_9a403b4dbb2b00719c5b7131b6397c05_conti.exe1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/6180-33-0x00007FF6230A0000-0x00007FF6230EB000-memory.dmp
memory/6180-25-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-2-0x00007FF6230A0000-0x00007FF6230EB000-memory.dmp
memory/6180-6-0x000002D685C00000-0x000002D6860B2000-memory.dmp
memory/6180-7-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-16-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-17-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-19-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-18-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-24-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-26-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-29-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-28-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-27-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-15-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-22-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-1-0x000002D684330000-0x000002D684331000-memory.dmp
memory/6180-21-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-0-0x00007FFDCB740000-0x00007FFDCB9A3000-memory.dmp
memory/6180-23-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-32-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/6180-34-0x000002D685C00000-0x000002D685E63000-memory.dmp
memory/7044-64-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-66-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-62-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-30-0x00007FFDCB740000-0x00007FFDCB9A3000-memory.dmp
memory/7044-53-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-54-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-52-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-56-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-35-0x00007FF6230A0000-0x00007FF6230EB000-memory.dmp
memory/7044-61-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-55-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-65-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-59-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-63-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-60-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-58-0x0000000180000000-0x00000001805B1000-memory.dmp
memory/7044-68-0x00007FF6230A0000-0x00007FF6230EB000-memory.dmp
memory/7044-67-0x0000000180000000-0x00000001805B1000-memory.dmp