2026-07-07_31ba3466d4134d7198dc25bc4da6e3b8_conti_elex

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-07_31ba3466d4134d7198dc25bc4da6e3b8_conti_elex
Size 172KB
Sample260707-msh2csds6k
SHA256 f7aa73a87b3a6514c99e43297d62a17fc90774af04c6c52b0a136e21fdf99d55
MD5 31ba3466d4134d7198dc25bc4da6e3b8
SHA1 716543b524cce1829f52a129dc5de6851338d2e7
SHA512 fca27f0c6b0c570a563934d48ef1c954ec7fc3bbe2e82a67eb496895fa98eb199c14dd58341ef7a09d565774c56ae74b5d8132fa5e228f0e07528663bf2e805c
SSDEEP 1536:2O1wHnfvu7SmdNGiebKKpbWrnWIYJX2P7ZvcLmfbnnCizMUcd9ZKzAdnqoHjPuhx:2O8KSmdsFCkJX2PG1hn1NuN9
TLSH
T1AF042A81FAE9AD97DF16057E89E7C3A5123CB6E407828F035A34B5302B53AD16ED6343
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-07_31ba3466d4134d7198dc25bc4da6e3b8_conti_elex

File Explorer

2026-07-07_31ba3466d4134d7198dc25bc4da6e3b8_conti_elex

.exe 172KB

2026-07-07_31ba3466d4134d7198dc25bc4da6e3b8_conti_elex

IMPHASH a2727bf176a6bda3fc1af78acc3e1a62
SHA256 f7aa73a87b3a6514c99e43297d62a17fc90774af04c6c52b0a136e21fdf99d55
MD5 31ba3466d4134d7198dc25bc4da6e3b8
SHA1 716543b524cce1829f52a129dc5de6851338d2e7
SHA512 fca27f0c6b0c570a563934d48ef1c954ec7fc3bbe2e82a67eb496895fa98eb199c14dd58341ef7a09d565774c56ae74b5d8132fa5e228f0e07528663bf2e805c
SSDEEP 1536:2O1wHnfvu7SmdNGiebKKpbWrnWIYJX2P7ZvcLmfbnnCizMUcd9ZKzAdnqoHjPuhx:2O8KSmdsFCkJX2PG1hn1NuN9
TLSH
T1AF042A81FAE9AD97DF16057E89E7C3A5123CB6E407828F035A34B5302B53AD16ED6343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

CryptAcquireContextA CryptCreateHash CryptDestroyHash CryptGetHashParam CryptHashData CryptReleaseContext

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateFontA CreatePen CreateSolidBrush DeleteDC DeleteObject Ellipse GetStockObject GetTextExtentPoint32A LineTo MoveToEx Rectangle SelectObject SetBkMode SetTextColor TextOutA

kernel32

CloseHandle CreateFileA CreateProcessA CreateThread DeleteCriticalSection DeleteFileA EnterCriticalSection ExitProcess FreeLibrary GetCommandLineA GetFileAttributesA GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetStartupInfoA InitializeCriticalSection IsDBCSLeadByte LeaveCriticalSection LoadLibraryA MoveFileExA ReadFile SetFileAttributesA SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WriteFile lstrcatA lstrcmpA lstrcmpiA lstrcpyA lstrcpynA lstrlenA

msvcrt

_XcptFilter __fpecode __getmainargs __p__iob __p___initenv __p__acmdln __p__commode __p__fmode __pxcptinfoptrs __set_app_type __setusermatherr _amsg_exit _cexit _exit _initterm abort atexit calloc exit fflush free fprintf malloc memcpy setvbuf signal strchr strlen strncmp strrchr strstr strtok strtoul vfprintf

user32

BeginPaint CharLowerBuffA CreateWindowExA DefWindowProcA DestroyWindow DispatchMessageA DrawIconEx EndPaint FillRect GetMessageA GetSystemMetrics InvalidateRect LoadCursorA LoadIconA MessageBoxA PostMessageA PostQuitMessage RegisterClassA ReleaseCapture SendMessageA ShowWindow TranslateMessage UpdateWindow wsprintfA

wininet

HttpQueryInfoA InternetCloseHandle InternetOpenA InternetOpenUrlA InternetReadFile

Name

.text

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

390KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

1024B

Virtual Size

840B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

1024B

Virtual Size

737B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/94

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/110

Size

512B

Virtual Size

483B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-07_31ba3466d4134d7198dc25bc4da6e3b8_conti_elex

advapi32

gdi32

kernel32

msvcrt

user32

wininet

generic