2026-07-01_3b88272553860fee05f7c98fe31b8b82_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-01_3b88272553860fee05f7c98fe31b8b82_conti
Size 317KB
Sample260701-l54yxsbs8j
SHA256 fb4177079c4fc73d8c1437b937f83c1e17ae708623ed80e202face352c294e73
MD5 3b88272553860fee05f7c98fe31b8b82
SHA1 0b6495abd903bf79c4e487c62669444a08ce5338
SHA512 4e70b6bfe8ba7a1610b3067f65b2d350d20025821c9d6c4b18bfe25c972884e692c9c800542498f6a17c379e5167457760e70338b26c3795a0f9271d14d74b44
SSDEEP 6144:jCSeEt9/sbyUArFxY5/vA2fUYYH6R/SZDVgBv:XtpIyUAp0HJYHR0v
TLSH
T125641201EDA321ADC912C07813F7BF33BAB63CCA6512537AD5D9CA7B3AA1A64147D503
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-01_3b88272553860fee05f7c98fe31b8b82_conti

File Explorer

2026-07-01_3b88272553860fee05f7c98fe31b8b82_conti

.exe 317KB

2026-07-01_3b88272553860fee05f7c98fe31b8b82_conti

IMPHASH 4eae89a7de0c731992f191b0d3f59394
SHA256 fb4177079c4fc73d8c1437b937f83c1e17ae708623ed80e202face352c294e73
MD5 3b88272553860fee05f7c98fe31b8b82
SHA1 0b6495abd903bf79c4e487c62669444a08ce5338
SHA512 4e70b6bfe8ba7a1610b3067f65b2d350d20025821c9d6c4b18bfe25c972884e692c9c800542498f6a17c379e5167457760e70338b26c3795a0f9271d14d74b44
SSDEEP 6144:jCSeEt9/sbyUArFxY5/vA2fUYYH6R/SZDVgBv:XtpIyUAp0HJYHR0v
TLSH
T125641201EDA321ADC912C07813F7BF33BAB63CCA6512537AD5D9CA7B3AA1A64147D503
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

GetUserNameA RegCloseKey RegCreateKeyExA RegOpenKeyExA RegSetValueExA

gdi32

EnumFontFamiliesW

kernel32

AddVectoredExceptionHandler CloseHandle CopyFileA CreateFileA CreateFileMappingA CreateProcessA CreateToolhelp32Snapshot DeleteCriticalSection EnterCriticalSection EnumTimeFormatsA EnumUILanguagesW GetCommandLineA GetCurrentProcess GetCurrentThread GetDiskFreeSpaceExA GetFileAttributesA GetFileSize GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetSystemInfo GetThreadContext GetTickCount GetTickCount64 GlobalMemoryStatusEx InitializeCriticalSection LeaveCriticalSection LoadLibraryA MapViewOfFile Process32First Process32Next RemoveVectoredExceptionHandler SetEnvironmentVariableA SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnmapViewOfFile VirtualAlloc VirtualProtect VirtualQuery WaitForSingleObject

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcpy strstr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _initialize_narrow_environment _seh_filter_exe _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf fflush setvbuf

api-ms-win-crt-string-l1-1-0

memset strcmp strlen strncmp

shell32

SHGetSpecialFolderPathA

user32

DispatchMessageA EnumWindows GetDC GetLastInputInfo GetMessageA GetSystemMetrics ReleaseDC SetTimer TranslateMessage

Name

u3pkerwd

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

1y5hmbxl

Size

289KB

Virtual Size

289KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

w7kv0f

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

s1mem1l

Size

1024B

Virtual Size

540B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

dl44j

Size

512B

Virtual Size

368B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

qtb63ozk

Size

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ux5cp

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

8_1whu

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

gf2abc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

m86pmh

Size

512B

Virtual Size

152B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-01_3b88272553860fee05f7c98fe31b8b82_conti

advapi32

gdi32

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

shell32

user32

generic