General
- Target 2026-08-20_1f5de10963d376576f36b8fe2e2403fc_conti
- Size 350KB
- Sample260820-xypffaxtdt
- SHA256 1ee789124f2c5e1fc37cead202d4fd42a49f1d9517c9b74446fafe916c143725
- MD5 1f5de10963d376576f36b8fe2e2403fc
- SHA1 563ac39cb7f957fb1fe37beb2ee6a66939b26eec
- SHA512 e228189912f5cd3f81ec8f5c00063b24912ae586b422753e99dbcdef579bcdea6870e6b68828c153e06a3809baf55537cc99dc351f05651306504c188c723768
- SSDEEP 6144:/y0VXhHdR4AVZUmwcB6UmJmH/74kc7PwQU/z:XVXbRZVZomHT4PwQ6
- TLSH T15E746C85FBD55CEACA0651358D9B43BD7338FAE02A835B1B092C72341E23AD1ED92717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_1f5de10963d376576f36b8fe2e2403fc_conti.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_1f5de10963d376576f36b8fe2e2403fc_conti.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_1f5de10963d376576f36b8fe2e2403fc_conti
- Size 350KB
- SHA256 1ee789124f2c5e1fc37cead202d4fd42a49f1d9517c9b74446fafe916c143725
- MD5 1f5de10963d376576f36b8fe2e2403fc
- SHA1 563ac39cb7f957fb1fe37beb2ee6a66939b26eec
- SHA512 e228189912f5cd3f81ec8f5c00063b24912ae586b422753e99dbcdef579bcdea6870e6b68828c153e06a3809baf55537cc99dc351f05651306504c188c723768
- SSDEEP 6144:/y0VXhHdR4AVZUmwcB6UmJmH/74kc7PwQU/z:XVXbRZVZomHT4PwQ6
- TLSH T15E746C85FBD55CEACA0651358D9B43BD7338FAE02A835B1B092C72341E23AD1ED92717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.