General
- Target 2026-08-09_7e573f6cd4ffd50fb10f177f59ab2c12_conti
- Size 90KB
- Sample260809-tzljdsvtaw
- SHA256 91867065a3f07d270db88a2c574d02ad4e7db7aade62b31a32ffd766c44ce325
- MD5 7e573f6cd4ffd50fb10f177f59ab2c12
- SHA1 d3119cd5ca4fc2ff8fc993bb205662d15892b653
- SHA512 6e9e0f1064091d3dffc62bb45dff709f398b752e3858c4e0a33942b5ad2d3457c930ef208007295d61ce673da095c4d2429603d0120622f6304ef9e61a4c31ba
- SSDEEP 1536:esPitErM5Vmu9ZlXq1C+TTS9iQYpZOZJ1dVdQm0jH2V2+2v9eeJCqI7PamVfg/OJ:esPiAMhNLLdr0g21eeJCqIZa/Oa/JvK
- TLSH T1BB93184BF61765DCC62ADD78D29A1732F723BC1901347B66E768C7342F60A90AD3C90A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_7e573f6cd4ffd50fb10f177f59ab2c12_conti.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_7e573f6cd4ffd50fb10f177f59ab2c12_conti.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_7e573f6cd4ffd50fb10f177f59ab2c12_conti
- Size 90KB
- SHA256 91867065a3f07d270db88a2c574d02ad4e7db7aade62b31a32ffd766c44ce325
- MD5 7e573f6cd4ffd50fb10f177f59ab2c12
- SHA1 d3119cd5ca4fc2ff8fc993bb205662d15892b653
- SHA512 6e9e0f1064091d3dffc62bb45dff709f398b752e3858c4e0a33942b5ad2d3457c930ef208007295d61ce673da095c4d2429603d0120622f6304ef9e61a4c31ba
- SSDEEP 1536:esPitErM5Vmu9ZlXq1C+TTS9iQYpZOZJ1dVdQm0jH2V2+2v9eeJCqI7PamVfg/OJ:esPiAMhNLLdr0g21eeJCqIZa/Oa/JvK
- TLSH T1BB93184BF61765DCC62ADD78D29A1732F723BC1901347B66E768C7342F60A90AD3C90A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.