General
- Target 2026-07-27_479e545a20bf68b6bc2708d4bc7e503d_conti
- Size 23KB
- Sample260727-pe675ssscy
- SHA256 febfcec27e00869b8bc04c6cc6a9997178da28af9291dc3cfb4f2f1a88a3dc65
- MD5 479e545a20bf68b6bc2708d4bc7e503d
- SHA1 a21a7f8ca9ea695cd4dcddc36ee042fdfe3edc27
- SHA512 fdf53248d0e51e7a471fd056681b4cccf88a04b165249f0f9c1813b30507fa048bde74aba69cfe365f3505c45e4a62fb1d8c07d63659ed598a44e7dd82a4ec05
- SSDEEP 384:ezPXRpANwA4k2XHtZYnc3UJLhjl3vTJhMhtytPjWI4XCW:ezPXw/UN6nRJLhtvTJe/yRWpyW
- TLSH T148B2F81EF75650E9CDE5D0B8D5DB8F32E6F2BC210429A32F1698C0696F21EC6C87C542
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_479e545a20bf68b6bc2708d4bc7e503d_conti.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_479e545a20bf68b6bc2708d4bc7e503d_conti.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_479e545a20bf68b6bc2708d4bc7e503d_conti
- Size 23KB
- SHA256 febfcec27e00869b8bc04c6cc6a9997178da28af9291dc3cfb4f2f1a88a3dc65
- MD5 479e545a20bf68b6bc2708d4bc7e503d
- SHA1 a21a7f8ca9ea695cd4dcddc36ee042fdfe3edc27
- SHA512 fdf53248d0e51e7a471fd056681b4cccf88a04b165249f0f9c1813b30507fa048bde74aba69cfe365f3505c45e4a62fb1d8c07d63659ed598a44e7dd82a4ec05
- SSDEEP 384:ezPXRpANwA4k2XHtZYnc3UJLhjl3vTJhMhtytPjWI4XCW:ezPXw/UN6nRJLhtvTJe/yRWpyW
- TLSH T148B2F81EF75650E9CDE5D0B8D5DB8F32E6F2BC210429A32F1698C0696F21EC6C87C542
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1