Analysis
- max time kernel
150s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
04/08/2026, 14:30
General
- Target 2026-08-04_b495094ee4c7eb845ab453123e1135be_conti.exe
- Size 746KB
- Sample260804-rvcdtasfnc
- SHA256 95bd6107d71262ba0792cc441addeb057ef7b4bd266a3db9ca3d527db33dbf59
Malware Config
Signatures
- Detects executables Discord URL observed in first stage droppers 1 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of FindShellTrayWindow 4 IoCs
- Suspicious use of SendNotifyMessage 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-04_b495094ee4c7eb845ab453123e1135be_conti.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-04_b495094ee4c7eb845ab453123e1135be_conti.exe"1⤵
- Suspicious use of FindShellTrayWindow
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1364-26-0x00007FF9A4500000-0x00007FF9A4890000-memory.dmp
memory/1364-31-0x00007FF9A3FF0000-0x00007FF9A40D8000-memory.dmp
memory/1364-8-0x00007FF9A4910000-0x00007FF9A4BC6000-memory.dmp
memory/1364-10-0x00007FF9A4910000-0x00007FF9A4BC6000-memory.dmp
memory/1364-9-0x00007FF9A4910000-0x00007FF9A4BC6000-memory.dmp
memory/1364-11-0x00007FF9A4910000-0x00007FF9A4BC6000-memory.dmp
memory/1364-12-0x00007FF9A4910000-0x00007FF9A4BC6000-memory.dmp
memory/1364-13-0x00007FF9A4910000-0x00007FF9A4BC6000-memory.dmp
memory/1364-14-0x00007FF9A4910000-0x00007FF9A4BC6000-memory.dmp
memory/1364-15-0x00007FF9A4910000-0x00007FF9A4BC6000-memory.dmp
memory/1364-16-0x00007FF9A4910000-0x00007FF9A4BC6000-memory.dmp
memory/1364-17-0x00007FF9A4910000-0x00007FF9A4BC6000-memory.dmp
memory/1364-19-0x00007FF72D7B0000-0x00007FF72D8A8000-memory.dmp
memory/1364-23-0x00007FF9A48F0000-0x00007FF9A4909000-memory.dmp
memory/1364-25-0x00007FF9A4890000-0x00007FF9A48BB000-memory.dmp
memory/1364-24-0x00007FF9A48C0000-0x00007FF9A48E2000-memory.dmp
memory/1364-22-0x00007FF9B3CE0000-0x00007FF9B3CF1000-memory.dmp
memory/1364-29-0x00007FF9A43E0000-0x00007FF9A44B2000-memory.dmp
memory/1364-28-0x00007FF9A44C0000-0x00007FF9A44D1000-memory.dmp
memory/1364-27-0x00007FF9A44E0000-0x00007FF9A44F4000-memory.dmp
memory/1364-7-0x00007FF9A4BBD000-0x00007FF9A4BBF000-memory.dmp
memory/1364-38-0x00007FF9A3DE0000-0x00007FF9A3DFA000-memory.dmp
memory/1364-20-0x00007FF9A4BD0000-0x00007FF9A4C04000-memory.dmp
memory/1364-30-0x00007FF9A4140000-0x00007FF9A43D6000-memory.dmp
memory/1364-33-0x00007FF9A3EB0000-0x00007FF9A3EF1000-memory.dmp
memory/1364-32-0x00007FF9A3F00000-0x00007FF9A3FE3000-memory.dmp
memory/1364-40-0x00007FF9A3DA0000-0x00007FF9A3DB1000-memory.dmp
memory/1364-39-0x00007FF9A3DC0000-0x00007FF9A3DD1000-memory.dmp
memory/1364-34-0x00007FF9A3E80000-0x00007FF9A3EAF000-memory.dmp
memory/1364-41-0x00007FF9A3B90000-0x00007FF9A3D9B000-memory.dmp
memory/1364-49-0x0000025215A40000-0x0000025215A51000-memory.dmp
memory/1364-50-0x00007FF9995E0000-0x00007FF999825000-memory.dmp
memory/1364-48-0x0000025215A20000-0x0000025215A31000-memory.dmp
memory/1364-47-0x00007FF9A36D0000-0x00007FF9A36E2000-memory.dmp
memory/1364-46-0x00007FF9A36F0000-0x00007FF9A370B000-memory.dmp
memory/1364-45-0x00007FF9A39A0000-0x00007FF9A3A4B000-memory.dmp
memory/1364-44-0x00007FF9A3A50000-0x00007FF9A3A75000-memory.dmp
memory/1364-43-0x00007FF9A3A80000-0x00007FF9A3ACF000-memory.dmp
memory/1364-42-0x00007FF9A3AD0000-0x00007FF9A3B68000-memory.dmp
memory/1364-37-0x00007FF9A3E00000-0x00007FF9A3E2D000-memory.dmp
memory/1364-36-0x00007FF9A3E30000-0x00007FF9A3E56000-memory.dmp
memory/1364-35-0x00007FF9A3E60000-0x00007FF9A3E78000-memory.dmp
memory/4856-0-0x00007FF7AE580000-0x00007FF7AE5EE000-memory.dmp