General
- Target 2026-07-19_eca87edb6823db4cc47fb7b732f241e3_conti
- Size 22KB
- Sample260719-ex7xaaet4s
- SHA256 ac1728ce8908a3965ef5a43c4e1f202ae39333d99ef14c083fc14f42ab9c89c7
- MD5 eca87edb6823db4cc47fb7b732f241e3
- SHA1 1f2a4c9d01fa782302293a4f6bb43ab0e8bfaa8a
- SHA512 c70e8104be45f02a72c3799c59b98cc76a44c1ce63dba4e848d4cdead05fd90424c5a120d4ebb12d4ebb8101d2f175322b72d05690b6222d157d6e54a650b634
- SSDEEP 384:WFE3gHKBgjK4X7OAlqU4wlQBlcsU3HPmkLPtCW:WOkA+K4rOAw2aBlcsAHPZLPYW
- TLSH T1C4A2E70EF25754E9DA65C034E9EB8732F5B0FC22017A273A2348E6391E71ED6967D043
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_eca87edb6823db4cc47fb7b732f241e3_conti.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_eca87edb6823db4cc47fb7b732f241e3_conti.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_eca87edb6823db4cc47fb7b732f241e3_conti
- Size 22KB
- SHA256 ac1728ce8908a3965ef5a43c4e1f202ae39333d99ef14c083fc14f42ab9c89c7
- MD5 eca87edb6823db4cc47fb7b732f241e3
- SHA1 1f2a4c9d01fa782302293a4f6bb43ab0e8bfaa8a
- SHA512 c70e8104be45f02a72c3799c59b98cc76a44c1ce63dba4e848d4cdead05fd90424c5a120d4ebb12d4ebb8101d2f175322b72d05690b6222d157d6e54a650b634
- SSDEEP 384:WFE3gHKBgjK4X7OAlqU4wlQBlcsU3HPmkLPtCW:WOkA+K4rOAw2aBlcsAHPZLPYW
- TLSH T1C4A2E70EF25754E9DA65C034E9EB8732F5B0FC22017A273A2348E6391E71ED6967D043
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE