General
- Target 2026-08-23_d18a48ef8ac7b189765d7d8d0dca4775_conti
- Size 238KB
- Sample260825-1pcbaswvh1
- SHA256 37b417cb2614a7175fb23947d601f8d7ab0df0b1f8b2a88c7a456890f0e3bd12
- MD5 d18a48ef8ac7b189765d7d8d0dca4775
- SHA1 f177b6fabc280da50bfecf99fe1e0965fd7e4961
- SHA512 49864a081d85df37451cb708bae251ef121d6335241adee927f280f279b284b5dc5e979cd3e26933543e246a6debc57199b8625f40600fb2d62e43cc169f3802
- SSDEEP 3072:3ytmucwrWcU5mPco0dn17zxohseDvIQt8U1mtzcvfN73pbqT6H8fO7pQz7duQ2Dr:3ytIx+AgbftOnshTNeuo2RU3Va4zlI
- TLSH T1E9341B0B73532CF8CAABC03982E69771B572B4560324FE6F0794CB333E62D554A6DA25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_d18a48ef8ac7b189765d7d8d0dca4775_conti.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_d18a48ef8ac7b189765d7d8d0dca4775_conti.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_d18a48ef8ac7b189765d7d8d0dca4775_conti
- Size 238KB
- SHA256 37b417cb2614a7175fb23947d601f8d7ab0df0b1f8b2a88c7a456890f0e3bd12
- MD5 d18a48ef8ac7b189765d7d8d0dca4775
- SHA1 f177b6fabc280da50bfecf99fe1e0965fd7e4961
- SHA512 49864a081d85df37451cb708bae251ef121d6335241adee927f280f279b284b5dc5e979cd3e26933543e246a6debc57199b8625f40600fb2d62e43cc169f3802
- SSDEEP 3072:3ytmucwrWcU5mPco0dn17zxohseDvIQt8U1mtzcvfN73pbqT6H8fO7pQz7duQ2Dr:3ytIx+AgbftOnshTNeuo2RU3Va4zlI
- TLSH T1E9341B0B73532CF8CAABC03982E69771B572B4560324FE6F0794CB333E62D554A6DA25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL