General
- Target 2026-07-22_5e02f0df28b6a8ac313c903f80120f40_conti
- Size 311KB
- Sample260722-3ytm2sdg73
- SHA256 fb7d0455099a1b737143ff58eb9d52b2dfcb5d28891445bc2d2d736c885a8d65
- MD5 5e02f0df28b6a8ac313c903f80120f40
- SHA1 f97a340ee97f9939abc85796b759736a1e5cd9dc
- SHA512 eb182054fd9a89e83adc217d3e0da1f58e392a4d3a9bf0ea8921603064022ccbf4d0be2a4abfac4f25bde170e8b73dba547f4fc20b9d064c9f16a0a7f2cfe229
- SSDEEP 6144:vCWOIWKc6lhOuLD5CEquvN+2lx4b+7WVfUFOMJ64:axCciN5CEnbe+7WhUFO4
- TLSH T197647C91FBC5ACD9DA1616308C6F53B8333CF3D50E429B136E39B2321E536D1AD86296
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_5e02f0df28b6a8ac313c903f80120f40_conti.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
0.5.8
Botnet
-
Default
Mutex
-
QlitDyGEskRb
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
-
local_host
127.0.0.1
aes.plain
Targets
-
- Target 2026-07-22_5e02f0df28b6a8ac313c903f80120f40_conti
- Size 311KB
- SHA256 fb7d0455099a1b737143ff58eb9d52b2dfcb5d28891445bc2d2d736c885a8d65
- MD5 5e02f0df28b6a8ac313c903f80120f40
- SHA1 f97a340ee97f9939abc85796b759736a1e5cd9dc
- SHA512 eb182054fd9a89e83adc217d3e0da1f58e392a4d3a9bf0ea8921603064022ccbf4d0be2a4abfac4f25bde170e8b73dba547f4fc20b9d064c9f16a0a7f2cfe229
- SSDEEP 6144:vCWOIWKc6lhOuLD5CEquvN+2lx4b+7WVfUFOMJ64:axCciN5CEnbe+7WhUFO4
- TLSH T197647C91FBC5ACD9DA1616308C6F53B8333CF3D50E429B136E39B2321E536D1AD86296
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Async RAT payload
-
Detects file containing reversed ASEP Autorun registry keys