2026-08-03_b4bd0d3e69c18ea97d0d58da66add588_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_b4bd0d3e69c18ea97d0d58da66add588_conti
Size 745KB
Sample260804-l58bcahc95
SHA256 f930d7bbda59fde36b359414090b6e42e5e30c87cd8d19818ef9e48c642d15cf
MD5 b4bd0d3e69c18ea97d0d58da66add588
SHA1 b4e191d504bdd84a14dc967fcab2f8b131b0b60f
SHA512 7e09bbdda93927de34b4e891ac8b40ab7b6f4cf71a9b978f9dcaf29e8e871e8e17aa89795bfdda169045f0ab9c82fc0f68c459f725d7a458dec69fca9db075e7
SSDEEP 12288:TVWMRoLJv6MXUOXL1JBrbVa7q5Zm90ODuPt0UezbaeM9oKi89+aRwtcd:pWMRoLJv6M5XL1JtL5IdDuyUeCFoKd9b
TLSH
T132F4E10B7B6760F8CA6B90384296EB77A671F8280329AF6F07D5C7331FA1D504D19A35
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_b4bd0d3e69c18ea97d0d58da66add588_conti

File Explorer

2026-08-03_b4bd0d3e69c18ea97d0d58da66add588_conti

.exe 745KB

2026-08-03_b4bd0d3e69c18ea97d0d58da66add588_conti

IMPHASH 45d65f23bd8dab700ec26c25820a3eeb
SHA256 f930d7bbda59fde36b359414090b6e42e5e30c87cd8d19818ef9e48c642d15cf
MD5 b4bd0d3e69c18ea97d0d58da66add588
SHA1 b4e191d504bdd84a14dc967fcab2f8b131b0b60f
SHA512 7e09bbdda93927de34b4e891ac8b40ab7b6f4cf71a9b978f9dcaf29e8e871e8e17aa89795bfdda169045f0ab9c82fc0f68c459f725d7a458dec69fca9db075e7
SSDEEP 12288:TVWMRoLJv6MXUOXL1JBrbVa7q5Zm90ODuPt0UezbaeM9oKi89+aRwtcd:pWMRoLJv6M5XL1JtL5IdDuyUeCFoKd9b
TLSH
T132F4E10B7B6760F8CA6B90384296EB77A671F8280329AF6F07D5C7331FA1D504D19A35
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

bcrypt

BCryptCloseAlgorithmProvider BCryptDecrypt BCryptDestroyKey BCryptGenerateSymmetricKey BCryptOpenAlgorithmProvider BCryptSetProperty

kernel32

DeleteCriticalSection EnterCriticalSection FormatMessageA GetCPInfo GetCurrentProcess GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetStartupInfoA InitializeCriticalSection IsDBCSLeadByte IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW LocalFree MultiByteToWideChar RaiseException ReadProcessMemory RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue VirtualAlloc VirtualFree VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

_XcptFilter ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _commode _errno _exit _fmode _initterm _read _write abort atexit calloc exit fflush fprintf fputc fputs free fwrite getenv localeconv malloc memchr memcmp memcpy memmove memset realloc setvbuf strchr strcmp strerror strlen strncmp strtoul vfprintf wcslen

libwinpthread-1

pthread_mutex_destroy pthread_mutex_init pthread_mutex_lock pthread_mutex_unlock

Name

.text

Size

151KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

545KB

Virtual Size

544KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_b4bd0d3e69c18ea97d0d58da66add588_conti

bcrypt

kernel32

msvcrt

libwinpthread-1

generic