ebd437938ef02b61414809ebe243268851717d84d1ea967655e73dae3bdbe72b

General

Target
2026-07-10_cc0378dbfcf515b8790bfcf2099a5ea9_conti
Size 262KB
Sample260710-nk6ccsbv3w
SHA256 ebd437938ef02b61414809ebe243268851717d84d1ea967655e73dae3bdbe72b
MD5 cc0378dbfcf515b8790bfcf2099a5ea9
SHA1 699e83570496a42377c6d7a6a01e628e334f825f
SHA512 d7799952c2174ab9f572dd3c99e64f0e26f329615c411c8e7114a6c7e6a9b33b6e9ab688ab69343906d9c5ac5a7820a5eff6ee3b971887d35092b916a768b25d
SSDEEP 3072:ubsCvePfOX9gboxkhbu9j+v0Vv06NiupYBLrqznSyTrq2HBWQIJqT7JJV7DnS7KE:Z30V7ihBL40vaFJV7DS7/ntLtxwy
TLSH
T167445B86FBD95CEACA1641358DAB437D7338F6D017875B170E28B2351E23AD0ED8261B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-10_cc0378dbfcf515b8790bfcf2099a5ea9_conti
- Size 262KB
- SHA256 ebd437938ef02b61414809ebe243268851717d84d1ea967655e73dae3bdbe72b
- MD5 cc0378dbfcf515b8790bfcf2099a5ea9
- SHA1 699e83570496a42377c6d7a6a01e628e334f825f
- SHA512 d7799952c2174ab9f572dd3c99e64f0e26f329615c411c8e7114a6c7e6a9b33b6e9ab688ab69343906d9c5ac5a7820a5eff6ee3b971887d35092b916a768b25d
- SSDEEP 3072:ubsCvePfOX9gboxkhbu9j+v0Vv06NiupYBLrqznSyTrq2HBWQIJqT7JJV7DnS7KE:Z30V7ihBL40vaFJV7DS7/ntLtxwy
- TLSH
  T167445B86FBD95CEACA1641358DAB437D7338F6D017875B170E28B2351E23AD0ED8261B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

bootkit defense_evasion evasion execution impact persistence ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Detects command variations typically used by ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Drops file in Drivers directory
- Modifies Windows Firewall
  defense_evasion
- Disables service(s)
  defense_evasion execution
- Stops running service(s)
  defense_evasion execution
- Drops desktop.ini file(s)
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1 behavioral2