2026-06-25_8e47116d14b7db1d7261eb82ca0d8a8f_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-25_8e47116d14b7db1d7261eb82ca0d8a8f_conti
Size 339KB
Sample260629-zyfjmsgv5m
SHA256 b7eff2e0ae34c8a0ac261eb766da0e95e5f922c70d93f3cef6c321fafd885933
MD5 8e47116d14b7db1d7261eb82ca0d8a8f
SHA1 a949f96406bba61d67df7337152e2c23f17aae2c
SHA512 f71b1643fe93d357aed1102738d5f3d07a7ee9091b5766c2737b5e1828e8430308017921b5d3bac509bcde356302be7f546738a7250240db2e7747dafff5616b
SSDEEP 6144:RzPAV5jzZaKf4FY87j3VYgaJ67g7/dXFXVZVObsRFG20K:RPC5jzcFt7S67YN+bK
TLSH
T144746CD2BBDA5CE6CA4217759CDB4378673CFE91AB4A0B174918F2311D13AC0AD8B346
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects executables Discord URL observed in first stage droppers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_DiscordURL

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-25_8e47116d14b7db1d7261eb82ca0d8a8f_conti

File Explorer

2026-06-25_8e47116d14b7db1d7261eb82ca0d8a8f_conti

.exe 339KB

2026-06-25_8e47116d14b7db1d7261eb82ca0d8a8f_conti

IMPHASH 120aba6c03b024db705b031eac13214a
SHA256 b7eff2e0ae34c8a0ac261eb766da0e95e5f922c70d93f3cef6c321fafd885933
MD5 8e47116d14b7db1d7261eb82ca0d8a8f
SHA1 a949f96406bba61d67df7337152e2c23f17aae2c
SHA512 f71b1643fe93d357aed1102738d5f3d07a7ee9091b5766c2737b5e1828e8430308017921b5d3bac509bcde356302be7f546738a7250240db2e7747dafff5616b
SSDEEP 6144:RzPAV5jzZaKf4FY87j3VYgaJ67g7/dXFXVZVObsRFG20K:RPC5jzcFt7S67YN+bK
TLSH
T144746CD2BBDA5CE6CA4217759CDB4378673CFE91AB4A0B174918F2311D13AC0AD8B346
MD5 SHA1 SHA512 SSDEEP TLSH

Detects executables Discord URL observed in first stage droppers
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCloseKey RegOpenKeyExA RegSetValueExA

libgcc_s_seh-1

_Unwind_Resume

kernel32

CloseHandle CopyFileA CreateMutexA DeleteCriticalSection EnterCriticalSection ExitProcess GetConsoleWindow GetLastError GetModuleFileNameA GetModuleHandleA GetStartupInfoA InitializeCriticalSection IsDBCSLeadByte IsDebuggerPresent LeaveCriticalSection SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery

api-ms-win-crt-convert-l1-1-0

mbrtowc wcrtomb

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale localeconv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcpy strstr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p__acmdln _cexit _configure_narrow_argv _crt_atexit _errno _exit _initialize_narrow_environment _seh_filter_exe _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf_s fflush fputc setvbuf

api-ms-win-crt-string-l1-1-0

memset strlen strncmp strnlen wcslen wcsnlen

libwinpthread-1

nanosleep64

libstdc++-6

_ZNKSt9basic_iosIwSt11char_traitsIwEEcvbEv _ZNSt14basic_ifstreamIwSt11char_traitsIwEE5closeEv _ZNSt14basic_ifstreamIwSt11char_traitsIwEE7is_openEv _ZNSt14basic_ifstreamIwSt11char_traitsIwEEC1EPKcSt13_Ios_Openmode _ZNSt14basic_ifstreamIwSt11char_traitsIwEED1Ev _ZNSt14basic_ofstreamIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode _ZNSt14basic_ofstreamIcSt11char_traitsIcEE5closeEv _ZNSt14basic_ofstreamIcSt11char_traitsIcEE7is_openEv _ZNSt14basic_ofstreamIcSt11char_traitsIcEEC1Ev _ZNSt14basic_ofstreamIcSt11char_traitsIcEED1Ev _ZNSt6thread15_M_start_threadESt10unique_ptrINS_6_StateESt14default_deleteIS1_EEPFvvE _ZNSt6thread6_StateD2Ev _ZNSt6thread6detachEv _ZSt17__throw_bad_allocv _ZSt20__throw_length_errorPKc _ZSt7getlineIwSt11char_traitsIwESaIwEERSt13basic_istreamIT_T0_ES7_RNSt7__cxx1112basic_stringIS4_S5_T1_EE _ZSt9terminatev _ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc _ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_c _ZTVN10__cxxabiv117__class_type_infoE _ZTVN10__cxxabiv120__si_class_type_infoE _ZTVNSt6thread6_StateE _ZdlPvy _Znwy __gxx_personality_seh0

user32

CallNextHookEx DispatchMessageA GetKeyState GetKeyboardState GetMessageA SetWindowsHookExA ShowWindow ToAscii TranslateMessage UnhookWindowsHookEx

wininet

HttpOpenRequestA HttpQueryInfoA HttpSendRequestA InternetCloseHandle InternetConnectA InternetOpenA

Name

.text

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

70KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

913B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-25_8e47116d14b7db1d7261eb82ca0d8a8f_conti

advapi32

libgcc_s_seh-1

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

libwinpthread-1

libstdc++-6

user32

wininet

generic