General
- Target 2026-07-12_453cc4b3969726d0aadbd159eabe0120_conti
- Size 245KB
- Sample260712-lkfetshw5z
- SHA256 4ce8421eabd7189d52b6d0a4f719f819c8806fda3d269b0e55a2bde2e401330e
- MD5 453cc4b3969726d0aadbd159eabe0120
- SHA1 8c44cdc43868ec6fdf8bad4f7192475f02162bbf
- SHA512 80488da06a68a5d461b19ac80f0a8b908939e1698da447ca21bdc5538ab8c21dc43cb41427012e627239389bbf5edac4598fc933183c3a3fc6cdffefc4f7bf41
- SSDEEP 6144:ZWs4pf1SAaJYeSpyP+T0sUNCTGFUPRXHcc:ZWshJYeSpyP2XVH7
- TLSH T1B7345C0B73932CF8C257807586E697B9B531F82C0724BF7F0698D7726EE1D540E6AA24
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_453cc4b3969726d0aadbd159eabe0120_conti.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
0.5.8
Botnet
-
Default
Mutex
-
yIsDNMXQx46e
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
-
local_host
127.0.0.1
aes.plain
Targets
-
- Target 2026-07-12_453cc4b3969726d0aadbd159eabe0120_conti
- Size 245KB
- SHA256 4ce8421eabd7189d52b6d0a4f719f819c8806fda3d269b0e55a2bde2e401330e
- MD5 453cc4b3969726d0aadbd159eabe0120
- SHA1 8c44cdc43868ec6fdf8bad4f7192475f02162bbf
- SHA512 80488da06a68a5d461b19ac80f0a8b908939e1698da447ca21bdc5538ab8c21dc43cb41427012e627239389bbf5edac4598fc933183c3a3fc6cdffefc4f7bf41
- SSDEEP 6144:ZWs4pf1SAaJYeSpyP+T0sUNCTGFUPRXHcc:ZWshJYeSpyP2XVH7
- TLSH T1B7345C0B73932CF8C257807586E697B9B531F82C0724BF7F0698D7726EE1D540E6AA24
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Async RAT payload
-
Detects file containing reversed ASEP Autorun registry keys
-
Executes dropped EXE