2026-08-03_efbe2ef6c2539a1fc51d9f291d5183b6_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_efbe2ef6c2539a1fc51d9f291d5183b6_conti
Size 227KB
Sample260803-chabcswejg
SHA256 869e3b65bb7744b7039c1ecae612cd7a1366ed0879dbbcc125e9e8acdc4b8a29
MD5 efbe2ef6c2539a1fc51d9f291d5183b6
SHA1 fc82d8ef8101f9163f1b05d91c2b3cce1fa22443
SHA512 11e5ab9df5133b1e771567323a9b70fa3856c3f2903a4e6aea909a8ae5c95b55db86b14b450cea33be719d3126cce2353281f8e8056f379942653a663668c4dc
SSDEEP 6144:Lulk6WQPiFVCM8MBP1cKnQ50pMnUNLX1:SluQLYP1cPkMgl
TLSH
T162342A5B73932CF8C27B803996D7E7B2A532B8150324FE6F4694C7332E21D510E6EA65
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_efbe2ef6c2539a1fc51d9f291d5183b6_conti

File Explorer

2026-08-03_efbe2ef6c2539a1fc51d9f291d5183b6_conti

.exe 227KB

2026-08-03_efbe2ef6c2539a1fc51d9f291d5183b6_conti

IMPHASH 736291f204cfacfde956a5a88bd77f24
SHA256 869e3b65bb7744b7039c1ecae612cd7a1366ed0879dbbcc125e9e8acdc4b8a29
MD5 efbe2ef6c2539a1fc51d9f291d5183b6
SHA1 fc82d8ef8101f9163f1b05d91c2b3cce1fa22443
SHA512 11e5ab9df5133b1e771567323a9b70fa3856c3f2903a4e6aea909a8ae5c95b55db86b14b450cea33be719d3126cce2353281f8e8056f379942653a663668c4dc
SSDEEP 6144:Lulk6WQPiFVCM8MBP1cKnQ50pMnUNLX1:SluQLYP1cPkMgl
TLSH
T162342A5B73932CF8C27B803996D7E7B2A532B8150324FE6F4694C7332E21D510E6EA65
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CloseHandle CreateEventA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FormatMessageA GetCPInfo GetConsoleWindow GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetProcessAffinityMask GetStartupInfoA GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount InitializeCriticalSection IsDBCSLeadByte IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW LocalFree MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseSemaphore ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEvent SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _acmdln _amsg_exit _assert _beginthreadex _cexit _commode _endthreadex _errno _fileno _fmode _initterm _read _setjmp _setmode _strdup _vscprintf _vsnprintf _write atexit abort calloc exit fflush fprintf fputc fputs free fwrite getenv localeconv longjmp malloc memchr memcmp memcpy memmove memset realloc setvbuf signal strchr strcmp strerror strlen strncmp strtoul vfprintf wcslen

user32

ShowWindow

wininet

HttpOpenRequestA HttpSendRequestA InternetCloseHandle InternetConnectA InternetOpenA

Name

.text

Size

171KB

Virtual Size

171KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

672B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_efbe2ef6c2539a1fc51d9f291d5183b6_conti

kernel32

msvcrt

user32

wininet

generic