Win32.Ransom.Conti MVID-2022-0662 Cryptography Logic Flaw

Win32.Ransom.Conti ransomware fails to encrypt non PE files that have a ".exe" in the filename. Creating specially crafted file names successfully evaded encryption for this malware sample.

conti cryptography flaw logic ransom ransom.conti win32