92358f920da726e06c84ee3f3f75405621668c4dd22ea5bef797674f48bef3c7

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 03:51

Target
2026-07-14_5fba273baf0c4baa6a0c94222d042440_conti.exe
Size 18KB
Sample260714-eew23adx5r
SHA256 92358f920da726e06c84ee3f3f75405621668c4dd22ea5bef797674f48bef3c7
MD5 5fba273baf0c4baa6a0c94222d042440
SHA1 fdb68b90cc9bf8459e973b21c87912e81fc6874d
SHA512 11ea330fe99970c74048506b76080c46a9a57d3f205916171f6ff6eed13dddc4c74fef874dda1367e5c97d7a342567484836f61ec23e20591c326a72a73d3c45
SSDEEP 192:VpPput6WMlcCZU5caeQZnNgt4QLxTyMvDjOaDHWgyUjPiycQQ6aBBoPKbRWyCszp:Et0lVI7n2Np9ulYiZFGPLyCW
TLSH
T15882C40ABA5794F9CEA6D1F4E1E78F72F5E1FD220520673B1394E0691E71882DE6D302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4964 wrote to memory of 3804	4964	2026-07-14_5fba273baf0c4baa6a0c94222d042440_conti.exe	89

C:\Users\Admin\AppData\Local\Temp\2026-07-14_5fba273baf0c4baa6a0c94222d042440_conti.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-14_5fba273baf0c4baa6a0c94222d042440_conti.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4964
- C:\Windows\SYSTEM32\cmd.exe
  cmd.exe
  2⤵
  PID:3804

memory/4964-0-0x00007FF644770000-0x00007FF64477C000-memory.dmp

Download