2026-07-27_289fd3f7da8461de3fc2f4d1385fe14e_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-27_289fd3f7da8461de3fc2f4d1385fe14e_conti
Size 212KB
Sample260727-3fyt2stbre
SHA256 57d8ff2632fb0303864f574616168238c09bcb878f918949562ee26a865798e8
MD5 289fd3f7da8461de3fc2f4d1385fe14e
SHA1 c7acf8bacff1667b6e1a9ee49f4e4804c63cbe0c
SHA512 690d665b1b4a4114ecf038302eedc7073724aad103fc2abb895e8d800357ef874f1e006931ca3403357ff0771baa8cc20050789f4c700a195783c79c7b2b73fd
SSDEEP 3072:BzLPumZsG3EB2kmRt52btk3zaV7PpnMLhxkQlTO3i3J2:BXFZBEB2kmR4tk+V7VcheMO3i3J2
TLSH
T14B2408826ACB4CF7EDC2273879D782396739FEA58F9A4B174914A0301D135C07EAB746
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects ransomware indicator 1 IoCs

resource	yara_rule
sample	SUSP_RANSOMWARE_Indicator_Jul20

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-27_289fd3f7da8461de3fc2f4d1385fe14e_conti

File Explorer

2026-07-27_289fd3f7da8461de3fc2f4d1385fe14e_conti

.exe 212KB

2026-07-27_289fd3f7da8461de3fc2f4d1385fe14e_conti

IMPHASH 2f240d2b68dd4b52c821cc31faeec4e2
SHA256 57d8ff2632fb0303864f574616168238c09bcb878f918949562ee26a865798e8
MD5 289fd3f7da8461de3fc2f4d1385fe14e
SHA1 c7acf8bacff1667b6e1a9ee49f4e4804c63cbe0c
SHA512 690d665b1b4a4114ecf038302eedc7073724aad103fc2abb895e8d800357ef874f1e006931ca3403357ff0771baa8cc20050789f4c700a195783c79c7b2b73fd
SSDEEP 3072:BzLPumZsG3EB2kmRt52btk3zaV7PpnMLhxkQlTO3i3J2:BXFZBEB2kmR4tk+V7VcheMO3i3J2
TLSH
T14B2408826ACB4CF7EDC2273879D782396739FEA58F9A4B174914A0301D135C07EAB746
MD5 SHA1 SHA512 SSDEEP TLSH

Detects ransomware indicator
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5264

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

CryptAcquireContextA CryptDestroyKey CryptEncrypt CryptExportKey CryptGenKey CryptReleaseContext RegCloseKey RegOpenKeyExA RegSetValueExA

libgcc_s_seh-1

_Unwind_Resume

kernel32

CloseHandle CreateFileA DeleteCriticalSection DeleteFileA EnterCriticalSection FindClose FindFirstFileA FindNextFileA GetCurrentProcessId GetDriveTypeA GetFileSize GetLastError GetLogicalDrives GlobalMemoryStatusEx InitializeCriticalSection LeaveCriticalSection ReadFile SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WriteFile

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcmp memcpy

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _initialize_narrow_environment _seh_filter_exe _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf fflush setvbuf

api-ms-win-crt-string-l1-1-0

memset strlen strncmp tolower

shell32

SHGetFolderPathA

libstdc++-6

_ZNSolsEm _ZNSt14basic_ofstreamIcSt11char_traitsIcEE5closeEv _ZNSt14basic_ofstreamIcSt11char_traitsIcEEC1ERKNSt7__cxx1112basic_stringIcS1_SaIcEEESt13_Ios_Openmode _ZNSt14basic_ofstreamIcSt11char_traitsIcEED1Ev _ZSt17__throw_bad_allocv _ZSt19__throw_logic_errorPKc _ZSt20__throw_length_errorPKc _ZSt24__throw_out_of_range_fmtPKcz _ZSt28__throw_bad_array_new_lengthv _ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc _ZdlPvy _Znwy __gxx_personality_seh0

user32

MessageBoxA SystemParametersInfoA

Name

.text

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

400B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

140B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

689B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

512B

Virtual Size

337B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-27_289fd3f7da8461de3fc2f4d1385fe14e_conti

advapi32

libgcc_s_seh-1

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

shell32

libstdc++-6

user32

generic