General
- Target 2026-07-05_5fd2d3863fb625e824f7d42421fb99ba_conti
- Size 20KB
- Sample260705-bzassags2x
- SHA256 10e5da44ce76f4589aec0605cac3d89e5d744540abc8a0d5129c9a474a393ad1
- MD5 5fd2d3863fb625e824f7d42421fb99ba
- SHA1 f6b86551eb8ac1811731d960ce4ef0128de4ae5c
- SHA512 55c63743e2ae5cba38607bcb4497d2f8b91b019cad2ffbbf391a76f31412e01e70bd8b2ac870ca6b16042b4cbaa5c64ef570939deb9edfcf15f3172728fa69e4
- SSDEEP 384:xuke0gUszbeUyU47UujqBoQRm5WiOHVO2ekLPOQCW:QMzsXk1pwVIFOHA2RLPOHW
- TLSH T1AB922C4EB3A324FCC522C035D6EA6371F5F1F921066E2B3E0644C23A2F10DA8977D58A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_5fd2d3863fb625e824f7d42421fb99ba_conti.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_5fd2d3863fb625e824f7d42421fb99ba_conti.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_5fd2d3863fb625e824f7d42421fb99ba_conti
- Size 20KB
- SHA256 10e5da44ce76f4589aec0605cac3d89e5d744540abc8a0d5129c9a474a393ad1
- MD5 5fd2d3863fb625e824f7d42421fb99ba
- SHA1 f6b86551eb8ac1811731d960ce4ef0128de4ae5c
- SHA512 55c63743e2ae5cba38607bcb4497d2f8b91b019cad2ffbbf391a76f31412e01e70bd8b2ac870ca6b16042b4cbaa5c64ef570939deb9edfcf15f3172728fa69e4
- SSDEEP 384:xuke0gUszbeUyU47UujqBoQRm5WiOHVO2ekLPOQCW:QMzsXk1pwVIFOHA2RLPOHW
- TLSH T1AB922C4EB3A324FCC522C035D6EA6371F5F1F921066E2B3E0644C23A2F10DA8977D58A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application