General
- Target 2026-08-09_094694680c32278ec22ae3b6af0c37a4_conti
- Size 618KB
- Sample260809-xhp22axsdz
- SHA256 c9ebf043af1e93ca47166462e1bd204bf2f41aa909a51043676f5a555b300034
- MD5 094694680c32278ec22ae3b6af0c37a4
- SHA1 3c403881f55e244a5b211d67b1e3c981a126cdcb
- SHA512 596adbd5a5539bba4c8cf8502e48a8b7af1448427b77c3bdb12a1e4402a57faec5fb303c25959ec737cd83e3ff8ae8b1ca96b643225a5bf86547cc760015ed2d
- SSDEEP 12288:G20E6ftpo+wodqcfz+OfJuKaY5VnNL0ScLlXCDa/rynZ:G20EMtpo+Hd1+OA6nNL0SYlX6a/+Z
- TLSH T12ED42309F2822DC4D72BD13AB7D6AB72B162FC2D24705D6F4224FA392F74CA49D2D425
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_094694680c32278ec22ae3b6af0c37a4_conti.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_094694680c32278ec22ae3b6af0c37a4_conti
- Size 618KB
- SHA256 c9ebf043af1e93ca47166462e1bd204bf2f41aa909a51043676f5a555b300034
- MD5 094694680c32278ec22ae3b6af0c37a4
- SHA1 3c403881f55e244a5b211d67b1e3c981a126cdcb
- SHA512 596adbd5a5539bba4c8cf8502e48a8b7af1448427b77c3bdb12a1e4402a57faec5fb303c25959ec737cd83e3ff8ae8b1ca96b643225a5bf86547cc760015ed2d
- SSDEEP 12288:G20E6ftpo+wodqcfz+OfJuKaY5VnNL0ScLlXCDa/rynZ:G20EMtpo+Hd1+OA6nNL0SYlX6a/+Z
- TLSH T12ED42309F2822DC4D72BD13AB7D6AB72B162FC2D24705D6F4224FA392F74CA49D2D425
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1