Overview

overview

8

Static

static

3

2026-07-18...er.exe

windows10-2004-x64

8

2026-07-18...er.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-18_5a6a775e14a1839ee1c814c3086ff071_cobalt-strike_conti_hijackloader
  • Size 157KB
  • Sample260718-ndkgbacy7t
  • SHA256 d1ba2ec0971391a5a6846fe508eed03e142f2edee9a74bc54d77775bb64a5e4d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
persistence

Malware Config

Targets

    • Target
      2026-07-18_5a6a775e14a1839ee1c814c3086ff071_cobalt-strike_conti_hijackloader
    • Size 157KB
    • SHA256 d1ba2ec0971391a5a6846fe508eed03e142f2edee9a74bc54d77775bb64a5e4d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    persistence

    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks