2026-03-17_554f5704a23ec35d348b9fa77092ce53_conti_elex_emotet

Sharing

Copy URL Twitter E-mail

General

Target
2026-03-17_554f5704a23ec35d348b9fa77092ce53_conti_elex_emotet
Size 500KB
Sample260317-exvxqaev3v
SHA256 869985182924ca7548289156cb500612a9f171c7e098b04550dbf62ab8f4ebd9
MD5 554f5704a23ec35d348b9fa77092ce53
SHA1 1d0b0d77dca66814e7c8976f3c095574a7c4e8ff
SHA512 035c0f869541c3abeecfac6b531309e01fec7cf538e331d28d3a4f8ee35d3a47f3a20c7d3562c657899644501dfb4115b01c85775eefa5a00176aa8996519ab5
SSDEEP 12288:A1PrZnZ+bAbZ0c78+O17e6j4gmoFFyy17xxxfe:A5ZnZ+bE78/1C6j4gmofyMxxfe
TLSH
T1C1B4232BA9666852C41B8CB114EBD4B2DD3DBC250B2ACE7FB1D46C4B9F0034BF525366
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-03-17_554f5704a23ec35d348b9fa77092ce53_conti_elex_emotet

File Explorer

2026-03-17_554f5704a23ec35d348b9fa77092ce53_conti_elex_emotet

.exe 500KB

2026-03-17_554f5704a23ec35d348b9fa77092ce53_conti_elex_emotet

IMPHASH 548f4998978df60ed30396e08fb9a9f4
SHA256 869985182924ca7548289156cb500612a9f171c7e098b04550dbf62ab8f4ebd9
MD5 554f5704a23ec35d348b9fa77092ce53
SHA1 1d0b0d77dca66814e7c8976f3c095574a7c4e8ff
SHA512 035c0f869541c3abeecfac6b531309e01fec7cf538e331d28d3a4f8ee35d3a47f3a20c7d3562c657899644501dfb4115b01c85775eefa5a00176aa8996519ab5
SSDEEP 12288:A1PrZnZ+bAbZ0c78+O17e6j4gmoFFyy17xxxfe:A5ZnZ+bE78/1C6j4gmofyMxxfe
TLSH
T1C1B4232BA9666852C41B8CB114EBD4B2DD3DBC250B2ACE7FB1D46C4B9F0034BF525366
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7366

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\SOFTWARE\DEVEL\DEBUG.pdb

Name

.text

Size

13KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.CRT0

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

114KB

Virtual Size

114KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

65KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.EXP

Size

287KB

Virtual Size

287KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-03-17_554f5704a23ec35d348b9fa77092ce53_conti_elex_emotet

setupapi

mscms

wininet

msvcrt

rpcrt4

userenv

gdi32

iphlpapi

kernel32

user32

shlwapi

generic