cb97e89541d61de376a4e041b66f80181811dfadb4b4d6c094a42632017604c2
Classification: Malicious
cb97e89541d61de376a4e041b66f80181811dfadb4b4d6c094a42632017604c2 is a malicious file sample (application/x-dosexec, 442.0 KB). Linked to Conti malware.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 10 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CONTI (S0575)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Triage | 2026-06-08 13:02:42 | 2026-06-08 13:02:42 | malicious-activity | |
| Generic Malware | Hybrid-Analysis | 2025-07-10 16:45:06 | 2025-07-10 17:30:10 | ||
| Conti | MalwareBazaar Abuse.ch | 2025-04-11 10:55:34 | 2025-04-11 10:55:34 | malicious-activity | S0575 Conti |
Tags
ransomware defense_evasion discovery trojan upxSample information
- Filenames
- A410448D110E6CFAA07CC22FF9942D2C.exe
- File type
- application/x-dosexec
- Size
- 452608 bytes
- MD5
a410448d110e6cfaa07cc22ff9942d2c- SHA-1
a0e9242ec69eb2259a7bde94ccc2a71cfde0e1fb- SHA-256
cb97e89541d61de376a4e041b66f80181811dfadb4b4d6c094a42632017604c2- First indexed
- 2025-04-11 12:21:42
- Last updated
- 2026-06-08 13:58:03
Process list
| Name | Command line |
|---|---|
| A410448D110E6CFAA07CC22FF9942D2C.exe | |
| cmd.exe | /c vssadmin Delete Shadows /All /Quiet |
| vssadmin.exe | vssadmin Delete Shadows /All /Quiet |
| cmd.exe | /c bcdedit /set {default} recoveryenabled No |
| cmd.exe | /c bcdedit /set {default} bootstatuspolicy ignoreallfailures |
| cmd.exe | /c wmic SHADOWCOPY /nointeractive |
| WMIC.exe | wmic SHADOWCOPY /nointeractive |
| NOTEPAD.EXE | C:\#HowToRecover.txt |
| cmd.exe | (/c ping 127.0.0.1 -n 5 > nul & del "C:\A410448D110E6CFAA07CC22FF9942D2C.exe" |
| PING.EXE | ping 127.0.0.1 -n 5 |