General
- Target 2026-07-12_dff2d25229709ba3ef8bab0de200e68b_conti
- Size 757KB
- Sample260712-j5e9fsgv41
- SHA256 412485d37ec968c8cfae2db28e9fb204fa7cecac8aecbfea2842a70a51d9969a
- MD5 dff2d25229709ba3ef8bab0de200e68b
- SHA1 361438d1411abcd56109f0e96c96263aeb55eb28
- SHA512 01139081c64f5941f0ff482be72c1c391afd6b453d67aed6e6409e4d4e7a7d47335539e0b4150326e3183016ef2b5e24ceff408bce75395b5dcd9d81b83c547c
- SSDEEP 3072:UOOEc8uE2KLwixt8uoDM3/D0uZw1QBUIfvxWMffdEbAdxUNbqymAEXlGGQikCwR2:W8NiMPakRXdEbExUNbq1oGFkCwq/
- TLSH T195F46C0B73A32CF8C3578075869797F6B531F9181324BE6F0698C7FA6E20D540E6AA64
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_dff2d25229709ba3ef8bab0de200e68b_conti.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
0.5.8
Botnet
-
Default
Mutex
-
yIsDNMXQx46e
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
-
local_host
127.0.0.1
aes.plain
Targets
-
- Target 2026-07-12_dff2d25229709ba3ef8bab0de200e68b_conti
- Size 757KB
- SHA256 412485d37ec968c8cfae2db28e9fb204fa7cecac8aecbfea2842a70a51d9969a
- MD5 dff2d25229709ba3ef8bab0de200e68b
- SHA1 361438d1411abcd56109f0e96c96263aeb55eb28
- SHA512 01139081c64f5941f0ff482be72c1c391afd6b453d67aed6e6409e4d4e7a7d47335539e0b4150326e3183016ef2b5e24ceff408bce75395b5dcd9d81b83c547c
- SSDEEP 3072:UOOEc8uE2KLwixt8uoDM3/D0uZw1QBUIfvxWMffdEbAdxUNbqymAEXlGGQikCwR2:W8NiMPakRXdEbExUNbq1oGFkCwq/
- TLSH T195F46C0B73A32CF8C3578075869797F6B531F9181324BE6F0698C7FA6E20D540E6AA64
- MD5 SHA1 SHA512 SSDEEP TLSH
Async RAT payload
- Custom signature
Detects file containing reversed ASEP Autorun registry keys
Executes dropped EXE