General
- Target 2026-07-31_b5621cebd40a7df04c5c6ce49ce41e8e_conti_elex
- Size 122KB
- Sample260731-nbne7a11cv
- SHA256 aab955262d57892acdbf7a318a8dce7576cc9777c77cc7ae9c5ead9717a4e6b8
- MD5 b5621cebd40a7df04c5c6ce49ce41e8e
- SHA1 19686bd13de8df4b785306273d3b97b936d68653
- SHA512 0cdfa724ae816aea9979a91e93925fbd1087991ba2f6c9046648024ebfdf0771a861baeb8f0cdfac4cf1bae08996c58b17809ed5458989b8449b3dbfd577b3c0
- SSDEEP 1536:Jd3W58LvLmfdbNQQUYqgq05mwDDZ+kqwiH7GkKhswNmzJ3abOcZeq:JdGGSdk7WhF4Fy/wq
- TLSH T15DC31996FAD9ADA7DB06123E98AB8379123DE7D507C29B035D39723417039D1AED2303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_b5621cebd40a7df04c5c6ce49ce41e8e_conti_elex.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_b5621cebd40a7df04c5c6ce49ce41e8e_conti_elex.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_b5621cebd40a7df04c5c6ce49ce41e8e_conti_elex
- Size 122KB
- SHA256 aab955262d57892acdbf7a318a8dce7576cc9777c77cc7ae9c5ead9717a4e6b8
- MD5 b5621cebd40a7df04c5c6ce49ce41e8e
- SHA1 19686bd13de8df4b785306273d3b97b936d68653
- SHA512 0cdfa724ae816aea9979a91e93925fbd1087991ba2f6c9046648024ebfdf0771a861baeb8f0cdfac4cf1bae08996c58b17809ed5458989b8449b3dbfd577b3c0
- SSDEEP 1536:Jd3W58LvLmfdbNQQUYqgq05mwDDZ+kqwiH7GkKhswNmzJ3abOcZeq:JdGGSdk7WhF4Fy/wq
- TLSH T15DC31996FAD9ADA7DB06123E98AB8379123DE7D507C29B035D39723417039D1AED2303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Winlogon Helper DLL
1