Analysis
- max time kernel
148s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 04:45
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-08-04_fdcdaba1d659224bea83168de42d8c59_conti.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_fdcdaba1d659224bea83168de42d8c59_conti.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target 2026-08-04_fdcdaba1d659224bea83168de42d8c59_conti.exe
- Size 162KB
- Sample260804-fdqdkav1es
- SHA256 d98413c108840be77d2992d97be6ee37528bf0d4ade48c725f666f0f51784fc9
- MD5 fdcdaba1d659224bea83168de42d8c59
- SHA1 4c07021f8b0cdd3ca334a13f9af2bade9e699dc2
- SHA512 9e81be6e137f4d74664724e40f69190558422465a5403a15e9888c1aceb95631b4921f38280fcbaff905507861af2cf12cf46f0bfa2d71f4391afca1d3fc2cb7
- SSDEEP 3072:hNY8f8ozWkaDV3M1HnPIRLOK5U8ZnS7G61KcAIE2PCF5LZW:3f8gg8JPIRL/UfG61KctMZW
- TLSH T1C3F36C03D28255FDC43AC9748EC7C336E772B868463576EA2F64CE266E50B60BE3D605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
resource yara_rule behavioral2/memory/3332-0-0x00007FF7F9430000-0x00007FF7F9461000-memory.dmp INDICATOR_SUSPICIOUS_Binary_Embedded_Crypto_Wallet_Browser_Extension_IDs - Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers 1 IoCs
resource yara_rule behavioral2/memory/3332-0-0x00007FF7F9430000-0x00007FF7F9461000-memory.dmp INDICATOR_SUSPICIOUS_Binary_References_Browsers - Detects executables referencing many Password Manager software clients. Observed in infostealers 1 IoCs
resource yara_rule behavioral2/memory/3332-0-0x00007FF7F9430000-0x00007FF7F9461000-memory.dmp INDICATOR_SUSPICIOUS_EXE_References_PasswordManagers - Detects executables referencing many confidential data stores found in browsers, mail clients, crypt 1 IoCs
resource yara_rule behavioral2/memory/3332-0-0x00007FF7F9430000-0x00007FF7F9461000-memory.dmp INDICATOR_SUSPICIOUS_EXE_References_Confidential_Data_Store