724d5c161e41f0cdf64588feac3dea42f085dc59012f45327a161ddc8d307bd5

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 00:06

Target
2026-07-15_44d70c788febc893f6ed801c25111660_conti_fabookie.exe
Size 504KB
Sample260716-advqdsb17w
SHA256 724d5c161e41f0cdf64588feac3dea42f085dc59012f45327a161ddc8d307bd5
MD5 44d70c788febc893f6ed801c25111660
SHA1 6ea5d1c963f17818b5dbc2c035de4d11e4e3b74b
SHA512 4cf8ab912b2f2908829e3c760c2104914c25bfe1834c7461fdfece780d447c80f36f5077cdfec84b57ff6b1c381594050e2b12a6cca9c893b3cdc36442a35f76
SSDEEP 12288:DUTx5Kh6qTDVMPi1gL5pRTcAkS/3hzN82:JdMPD5jcAkSY2
TLSH
T124B45B2AE27801B9D073C079C6D2B736E931388653305ADF5396D7682F13AFA9639731
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings	2026-07-15_44d70c788febc893f6ed801c25111660_conti_fabookie.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-15_44d70c788febc893f6ed801c25111660_conti_fabookie.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-15_44d70c788febc893f6ed801c25111660_conti_fabookie.exe"
1⤵
- Modifies registry class
PID:1340

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3440

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact