General
- Target 2026-07-12_bccbc70275dd69b2af4c730517f64632_conti
- Size 763KB
- Sample260712-tnstbscz2p
- SHA256 29fa06ab345c1a0b1d01ae731b5b6e742ad966a3ed79f81e79eca661d756ef6c
- MD5 bccbc70275dd69b2af4c730517f64632
- SHA1 082a246462d543126e47ce59aa06dc635ec18220
- SHA512 6afecd2a8b89c266e8d9060f1452c5a2c4b9df67038d2e6841f7d561ede54122e7e0e4ddeabd150b7c249d19e85cabaf8c4f33ddd726525a2ce03c38e58fd02c
- SSDEEP 12288:WfcjMBsrGAfMSO5uJ/Jqmkjzf6tPE21lrHB+R8mvbDYO60XetuR5Smzf:W5BsrhdB0zf6tPvNHB+R8mvbGge2L
- TLSH T1D4F4F10B73932CF8C667807985D6DB76E071B82D0326BF2F0A94D7B26E21C484E59E74
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_bccbc70275dd69b2af4c730517f64632_conti.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
0.5.8
Botnet
-
Default
Mutex
-
yIsDNMXQx46e
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
-
local_host
127.0.0.1
aes.plain
Targets
-
- Target 2026-07-12_bccbc70275dd69b2af4c730517f64632_conti
- Size 763KB
- SHA256 29fa06ab345c1a0b1d01ae731b5b6e742ad966a3ed79f81e79eca661d756ef6c
- MD5 bccbc70275dd69b2af4c730517f64632
- SHA1 082a246462d543126e47ce59aa06dc635ec18220
- SHA512 6afecd2a8b89c266e8d9060f1452c5a2c4b9df67038d2e6841f7d561ede54122e7e0e4ddeabd150b7c249d19e85cabaf8c4f33ddd726525a2ce03c38e58fd02c
- SSDEEP 12288:WfcjMBsrGAfMSO5uJ/Jqmkjzf6tPE21lrHB+R8mvbDYO60XetuR5Smzf:W5BsrhdB0zf6tPvNHB+R8mvbGge2L
- TLSH T1D4F4F10B73932CF8C667807985D6DB76E071B82D0326BF2F0A94D7B26E21C484E59E74
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Async RAT payload
-
Detects file containing reversed ASEP Autorun registry keys
-
Executes dropped EXE