General

  • Target
    2026-08-03_3a67c00c21896ba0d8f7a7823797fd3d_conti
  • Size 352KB
  • Sample260804-djsd1at1ax
  • SHA256 6a3c70e846e6259200425f7780e797d1f43aecd5125c78519d1021db78066371
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-03_3a67c00c21896ba0d8f7a7823797fd3d_conti
    • Size 352KB
    • SHA256 6a3c70e846e6259200425f7780e797d1f43aecd5125c78519d1021db78066371
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects executables Discord URL observed in first stage droppers

    • UPX dump on OEP (original entry point)

    • Creates a file in the Startup directory

      A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks