f2a4954555b8fad0d6d7426df5b278d1dc80e38804ad6ad02f811a139d0b7222

Analysis

max time kernel
148s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 01:28

Target
2026-07-05_7a7caaee6477e81efe0c92d47640bef9_conti.exe
Size 20KB
Sample260705-bv1teaby5q
SHA256 f2a4954555b8fad0d6d7426df5b278d1dc80e38804ad6ad02f811a139d0b7222
MD5 7a7caaee6477e81efe0c92d47640bef9
SHA1 9da6ca495e0715891c74002e6ad6bfe7899542b0
SHA512 086085403960ff8d824d2f51498112e9d95d74207964973c78b53b38a5f6b750ec59e5c5ce8c1e0245c69d5ee98c681748f697411e72933fdc86ae58f03f05c1
SSDEEP 384:3zZQz0Gt2yl20X9pwkJI3CO0Uq8QNpSCW:3z3GthAf4cCOLq86pZW
TLSH
T1E692D60EF35354E9DB26D1B4E5EF8771E9B1BC210136A73A2348D7395F709A28A2D003
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1400 wrote to memory of 6308	1400	2026-07-05_7a7caaee6477e81efe0c92d47640bef9_conti.exe	90

C:\Users\Admin\AppData\Local\Temp\2026-07-05_7a7caaee6477e81efe0c92d47640bef9_conti.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-05_7a7caaee6477e81efe0c92d47640bef9_conti.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1400
- C:\Windows\SYSTEM32\cmd.exe
  cmd.exe
  2⤵
  PID:6308