Conti Unpacked | Understanding Ransomware Development As a Response to Detection - SentinelLabs
Tags
country: Ireland
attack-pattern: Data Model Malware - T1587.001 Malware - T1588.001 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID eba0bc00-25a6-4efd-96c3-073e6eef14d7
Fingerprint a757c0e1e8388681
Analysis status DONE
Considered CTI value 2
Text language
Published July 8, 2021, midnight
Added to db Feb. 18, 2023, 12:22 a.m.
Last updated Nov. 17, 2024, 5:58 p.m.
Headline Conti Unpacked | Understanding Ransomware Development As a Response to Detection
Title Conti Unpacked | Understanding Ransomware Development As a Response to Detection - SentinelLabs
Detected Hints/Tags/Attributes 54/2/6
Source URLs
Redirection Url
Details Source https://labs.sentinelone.com/conti-unpacked-understanding-ransomware-development-as-a-response-to-detection/
Details Source https://www.sentinelone.com/labs/conti-unpacked-understanding-ransomware-development-as-a-response-to-detection/
URL Provider
Details Provider Source level domain
Details sentinelone.com www.sentinelone.com
Details sentinelone.com labs.sentinelone.com
Attributes
Details Type #Events CTI Value
Details File 16 
rstrtmgr.dll
Details File 748 
kernel32.dll
Details sha256 1 
2f334c0802147aa0eee90ff0a2b0e1022325b5cba5cb5236ed3717a2b0582a9c
Details sha256 1 
4f43a66d96270773f4e849055a844feb6ef234d7340b797f8763b7a9f8d80583
Details sha256 1 
94bdec109405050d31c2748fe3db32a357f554a441e0eae0af015e8b6461553e
Details sha256 1 
77b1fcae9e8f0a5a739c35961382e2b3f239a05c1135c4a8efe1964a263d5a47