b0e180e4b7668c447acf8ee7a213c114a9029c4c6a0bc1a9cddd0bdebea85d35

Analysis

max time kernel
150s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 02:57

Target
2026-08-02_7f689baecaf9e52d5cddceda7d520058_conti.exe
Size 19KB
Sample260802-dfw8sashja
SHA256 b0e180e4b7668c447acf8ee7a213c114a9029c4c6a0bc1a9cddd0bdebea85d35
MD5 7f689baecaf9e52d5cddceda7d520058
SHA1 3f8019cdc58bc7563aabea0a3119f88b3294f60f
SHA512 d0f8063876632fe2bbf312add572ff85fd2907091300f242b18c6440ca8cdfa972d7b7fc168b1037d7e4469209eaa78d4a894acf3626ca8db5c3b3a5fb46d1b8
SSDEEP 384:102mHs/e9ruEJ0X9bBBBBBBBBBBBBBCHiHPbWqftYBayCW:102R/e9ru2RaPSqlYBa5W
TLSH
T1B392E90DB21340E8DB99D1B4E2EF4BB5E970FD220534A63E2744E6391F30E929A6E503
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5184 wrote to memory of 4128	5184	2026-08-02_7f689baecaf9e52d5cddceda7d520058_conti.exe	90

C:\Users\Admin\AppData\Local\Temp\2026-08-02_7f689baecaf9e52d5cddceda7d520058_conti.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-02_7f689baecaf9e52d5cddceda7d520058_conti.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5184
- C:\Windows\SYSTEM32\cmd.exe
  cmd.exe
  2⤵
  PID:4128