General
- Target 2026-08-25_8dc0af773eb45837df1c0ee02db1a9e8_conti
- Size 24KB
- Sample260826-wgx6kstdlf
- SHA256 563c15681c1841c7d8d89353684c517abb2d6178be308850f7b3f55e186f01b5
- MD5 8dc0af773eb45837df1c0ee02db1a9e8
- SHA1 4545c882cd4dacd3d6ffe46b3c8456d65731f847
- SHA512 6ae3f2ba6487a4dc3592f473e0e897f0017fbcb02e8127781cd35da936ed3a2a029a68df8a79327a87b78405a8779feff4891833a7b8aacd1dd52a8a8ff0abd6
- SSDEEP 384:zTyOfZKq610Pk7yu4vBBBBBBBBBBBBBO/+SOhH82XD8iJqCW:zTy+/bPk7+BBBBBBBBBBBBBO/GhHNYiG
- TLSH T1F5B22B0EF743A4D8C7A2E174E4EB9F31F9B2FD1205796B3A1344D1786F21D968A6C602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-25_8dc0af773eb45837df1c0ee02db1a9e8_conti.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_8dc0af773eb45837df1c0ee02db1a9e8_conti.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_8dc0af773eb45837df1c0ee02db1a9e8_conti
- Size 24KB
- SHA256 563c15681c1841c7d8d89353684c517abb2d6178be308850f7b3f55e186f01b5
- MD5 8dc0af773eb45837df1c0ee02db1a9e8
- SHA1 4545c882cd4dacd3d6ffe46b3c8456d65731f847
- SHA512 6ae3f2ba6487a4dc3592f473e0e897f0017fbcb02e8127781cd35da936ed3a2a029a68df8a79327a87b78405a8779feff4891833a7b8aacd1dd52a8a8ff0abd6
- SSDEEP 384:zTyOfZKq610Pk7yu4vBBBBBBBBBBBBBO/+SOhH82XD8iJqCW:zTy+/bPk7+BBBBBBBBBBBBBO/GhHNYiG
- TLSH T1F5B22B0EF743A4D8C7A2E174E4EB9F31F9B2FD1205796B3A1344D1786F21D968A6C602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.