General

  • Target
    2026-08-07_0de0f7f43d26097084e3c578ccb7af3a_conti
  • Size 190KB
  • Sample260807-gv7jvaec84
  • SHA256 5d47d04faf51df41225c49c7568c4128195b18f2a9cd0f6715fcb95f919a1611
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-08-07_0de0f7f43d26097084e3c578ccb7af3a_conti
    • Size 190KB
    • SHA256 5d47d04faf51df41225c49c7568c4128195b18f2a9cd0f6715fcb95f919a1611
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)

    • Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion

    • Detects executables embedding command execution via IExecuteCommand COM object

    • detects Windows exceutables potentially bypassing UAC using eventvwr.exe

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks