2026-06-30_8cc2b2f4a52dbab1e4ee3e502996a451_conti_elex

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-30_8cc2b2f4a52dbab1e4ee3e502996a451_conti_elex
Size 38KB
Sample260701-egh8zsdy5p
SHA256 a1afe3f11d31efc63bd7345e836ceeb8fcf03308a5c0075ba13d2930b572f758
MD5 8cc2b2f4a52dbab1e4ee3e502996a451
SHA1 2e4bc2d622cc183a56fdf3329a8f52ff4828b97e
SHA512 8ca5e7d2e1e8026bfd8a24cb25c937ec6e6f5ba7fa1e19c892cfbe4c624324bb8c68492420d765246f48766a8779e2804e37746ed6a444b8b538bdf0bd5da40b
SSDEEP 768:m8+YjJzM/TPMBRRoduJzLSUBFptCS03GiN1W1l:HJdR5JXSyzpC1Wf
TLSH
T1A0033A49BF4990F1F962C13158D9E7BFC6567E3184295923FF88DB0AA8679F3C01A243
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-30_8cc2b2f4a52dbab1e4ee3e502996a451_conti_elex

File Explorer

2026-06-30_8cc2b2f4a52dbab1e4ee3e502996a451_conti_elex

.exe 38KB

2026-06-30_8cc2b2f4a52dbab1e4ee3e502996a451_conti_elex

IMPHASH 368a743ebbd2b53856fa23968c779c32
SHA256 a1afe3f11d31efc63bd7345e836ceeb8fcf03308a5c0075ba13d2930b572f758
MD5 8cc2b2f4a52dbab1e4ee3e502996a451
SHA1 2e4bc2d622cc183a56fdf3329a8f52ff4828b97e
SHA512 8ca5e7d2e1e8026bfd8a24cb25c937ec6e6f5ba7fa1e19c892cfbe4c624324bb8c68492420d765246f48766a8779e2804e37746ed6a444b8b538bdf0bd5da40b
SSDEEP 768:m8+YjJzM/TPMBRRoduJzLSUBFptCS03GiN1W1l:HJdR5JXSyzpC1Wf
TLSH
T1A0033A49BF4990F1F962C13158D9E7BFC6567E3184295923FF88DB0AA8679F3C01A243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

CloseServiceHandle CreateServiceA GetUserNameA OpenSCManagerA RegCloseKey RegOpenKeyExA RegQueryValueExA RegSetValueExA StartServiceA

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject GetDeviceCaps SelectObject

gdiplus

GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipSaveImageToFile GdiplusShutdown GdiplusStartup

kernel32

CloseHandle CopyFileA CreateFileA CreateThread DeleteCriticalSection DeleteFileA EnterCriticalSection ExitProcess FreeLibrary GetComputerNameA GetCurrentProcess GetCurrentProcessId GetCurrentThread GetFileSize GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetStartupInfoA GetTempPathA GetTickCount GetVolumeInformationA InitializeCriticalSection IsDBCSLeadByte LeaveCriticalSection LoadLibraryA ReadFile SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WaitForMultipleObjects

mpr

WNetAddConnection2A

msvcrt

__getmainargs __p__fmode __p__iob __p___initenv __p__acmdln __p__commode __set_app_type __setusermatherr _amsg_exit _cexit _initterm _snprintf abort atexit calloc exit fflush fprintf free getenv isalnum malloc mbstowcs memcpy rand setvbuf signal srand strcmp strlen strncmp strncpy time strstr vfprintf wcslen

ole32

CLSIDFromString CoCreateInstance CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoUninitialize

oleaut32

SysAllocString SysFreeString

user32

GetDC ReleaseDC wsprintfW

winhttp

WinHttpAddRequestHeaders WinHttpCloseHandle WinHttpConnect WinHttpOpen WinHttpOpenRequest WinHttpReceiveResponse WinHttpSendRequest WinHttpSetOption

ws2_32

WSAStartup closesocket connect gethostbyname gethostname htons inet_addr ioctlsocket ntohl recv select send socket

Name

.text

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

368B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

784B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-30_8cc2b2f4a52dbab1e4ee3e502996a451_conti_elex

advapi32

gdi32

gdiplus

kernel32

mpr

msvcrt

ole32

oleaut32

user32

winhttp

ws2_32

generic