General
- Target 2026-05-16_81a0416be119bb62790642d5e6e931cd_conti_elex
- Size 64KB
- Sample260516-kcdetsby7y
- SHA256 cb0c87ff75d7122a8e6d90b051f2124b76e5afb9e9fb7e7a30b0959cb698c9a4
- MD5 81a0416be119bb62790642d5e6e931cd
- SHA1 771bf441ac2adc13104ab841b515b8a5040b2bad
- SHA512 f2e3180e6171b8246d64da101d09ec05188e2269a9e2d6cf937a09f6cf5aab435f2ac95f22fdf1217188462f0e884a3cc190afc4e879927d81f57318a828f247
- SSDEEP 768:/RX77r2+xuha5I8aExoVWZd1+EgLeSMNrTjxemIbBhNhs355UZNSm23iqbodlYYG:/F74pdQXN+kSmXjQXNhXm558NSY1WMa
- TLSH T18F535C5BE74701F9C24381B019AF9B72FB35BC31123052AE1B98F6192F70DA9A73B654
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-16_81a0416be119bb62790642d5e6e931cd_conti_elex.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_81a0416be119bb62790642d5e6e931cd_conti_elex.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_81a0416be119bb62790642d5e6e931cd_conti_elex
- Size 64KB
- SHA256 cb0c87ff75d7122a8e6d90b051f2124b76e5afb9e9fb7e7a30b0959cb698c9a4
- MD5 81a0416be119bb62790642d5e6e931cd
- SHA1 771bf441ac2adc13104ab841b515b8a5040b2bad
- SHA512 f2e3180e6171b8246d64da101d09ec05188e2269a9e2d6cf937a09f6cf5aab435f2ac95f22fdf1217188462f0e884a3cc190afc4e879927d81f57318a828f247
- SSDEEP 768:/RX77r2+xuha5I8aExoVWZd1+EgLeSMNrTjxemIbBhNhs355UZNSm23iqbodlYYG:/F74pdQXN+kSmXjQXNhXm558NSY1WMa
- TLSH T18F535C5BE74701F9C24381B019AF9B72FB35BC31123052AE1B98F6192F70DA9A73B654
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory