907a4d72e248056de01b4c7388bca6e36cf029c9e472bab23a92c3708246cacf

Analysis

max time kernel
150s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 10:46

Target
2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe
Size 252KB
Sample260801-mt1b2ahe43
SHA256 907a4d72e248056de01b4c7388bca6e36cf029c9e472bab23a92c3708246cacf
MD5 8eb07d85f38acfdaa04109feec25cd3b
SHA1 5edb7265ee2126cc639fc99106b9a6d5d0c63105
SHA512 1e26a88ac7e67ff5d975407c9f45b5d2286d564e3559998291dff52a50e75621b7dc2a7c91805e7e86d97be0616a4e1c44acc3a3ab8e35d29f4c2bd7de81a614
SSDEEP 3072:TE2bVJXZApkwxXkTlmm/t2Q80Ulb7I3vUY6+WSvm:TbKsFXU17I34
TLSH
T170445C15EB5360BED25AD478C5934DB2E962BC4A0360AEEF5780DEB20D71ED09F3D212
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2900 wrote to memory of 5112	2900	2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe	90
PID 2900 wrote to memory of 5112	2900	2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe	90
PID 2900 wrote to memory of 5112	2900	2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe	90
PID 2900 wrote to memory of 5112	2900	2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe	90
PID 2900 wrote to memory of 5112	2900	2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe	90
PID 2900 wrote to memory of 5112	2900	2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe	90
PID 2900 wrote to memory of 5112	2900	2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe	90

C:\Users\Admin\AppData\Local\Temp\2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2900
- C:\Users\Admin\AppData\Local\Temp\2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe
  "C:\Users\Admin\AppData\Local\Temp\2026-08-01_8eb07d85f38acfdaa04109feec25cd3b_conti.exe"
  2⤵
  PID:5112

memory/2900-0-0x0000000140000000-0x000000014004C000-memory.dmp

Download

memory/2900-2-0x0000000140000000-0x000000014004C000-memory.dmp

Download