2026-08-03_790c42e33ae3cd84cd1d41bc8de51c99_conti_elex

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_790c42e33ae3cd84cd1d41bc8de51c99_conti_elex
Size 352KB
Sample260804-nb6lrsab49
SHA256 54ebc2c202e30ac2289a546a7a5a4cdc658b6acb31738e02a0184b6ce8d3364a
MD5 790c42e33ae3cd84cd1d41bc8de51c99
SHA1 ae8f5b89055e178bb5fe1f619ae40544a6df1525
SHA512 1875150f0f34af3d4160bf96a6ce2341487031e4340130129b122d61ab35d4effc5b8d3225b3af382978555b9f6f17ab52c59000c3d0bd34094ce4bf13f0502b
SSDEEP 6144:YmoUJxQ+ywdzg4/nGG0m6Vcod06q3iOlUVIMqf4LIEq68UtAX4o+5yW11Yv:YmoUxQCzg4/nGG0micod06q3iOlGqf4E
TLSH
T132746C4DFB8340B4E60B5AF18CDBD7BBC62872164126D677FB4DDA4AB8333026C95249
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_790c42e33ae3cd84cd1d41bc8de51c99_conti_elex

File Explorer

2026-08-03_790c42e33ae3cd84cd1d41bc8de51c99_conti_elex

.exe 352KB

2026-08-03_790c42e33ae3cd84cd1d41bc8de51c99_conti_elex

IMPHASH 3ea7b3cefbbf27de0e46bd0e331e1d41
SHA256 54ebc2c202e30ac2289a546a7a5a4cdc658b6acb31738e02a0184b6ce8d3364a
MD5 790c42e33ae3cd84cd1d41bc8de51c99
SHA1 ae8f5b89055e178bb5fe1f619ae40544a6df1525
SHA512 1875150f0f34af3d4160bf96a6ce2341487031e4340130129b122d61ab35d4effc5b8d3225b3af382978555b9f6f17ab52c59000c3d0bd34094ce4bf13f0502b
SSDEEP 6144:YmoUJxQ+ywdzg4/nGG0m6Vcod06q3iOlUVIMqf4LIEq68UtAX4o+5yW11Yv:YmoUxQCzg4/nGG0micod06q3iOlGqf4E
TLSH
T132746C4DFB8340B4E60B5AF18CDBD7BBC62872164126D677FB4DDA4AB8333026C95249
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

GetTokenInformation OpenProcessToken RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA

bcrypt

BCryptCloseAlgorithmProvider BCryptDecrypt BCryptDestroyKey BCryptGenerateSymmetricKey BCryptOpenAlgorithmProvider BCryptSetProperty

gdi32

Rectangle

iphlpapi

GetAdaptersInfo

kernel32

CheckRemoteDebuggerPresent CloseHandle CopyFileA CreateDirectoryA CreateEventA CreateFileA CreateMutexA CreateSemaphoreA CreateWaitableTimerA DeleteCriticalSection DuplicateHandle EnterCriticalSection EnumSystemLocalesA ExitProcess ExpandEnvironmentStringsA FormatMessageA FreeLibrary GetCPInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableA GetFileSize GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetProcessAffinityMask GetStartupInfoA GetSystemInfo GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount GlobalMemoryStatusEx InitializeCriticalSection IsDBCSLeadByte IsDebuggerPresent IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFree MoveFileExA MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSemaphore ResetEvent ResumeThread SetEvent SetFileAttributesA SetFilePointer SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter SetWaitableTimer Sleep SuspendThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualAlloc VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte lstrcatA lstrcmpiA lstrcpyA lstrlenA

msvcrt

_XcptFilter __fpecode __getmainargs __lc_codepage __p__iob __p___initenv __p___mb_cur_max __p__acmdln __p__commode __p__fmode __pxcptinfoptrs __set_app_type __setusermatherr _assert _amsg_exit _beginthreadex _cexit _endthreadex _errno _exit _fileno _initterm _read _setjmp3 _setmode _strdup _vsnprintf _write abort atexit calloc exit fflush fputc fputs free fprintf fwrite getenv localeconv longjmp malloc memchr memcmp memcpy memmove memset realloc setvbuf signal strchr strcmp strerror strlen strncmp strtoul vfprintf wcslen

shell32

SHFileOperationA ShellExecuteExA

user32

CreateWindowExA GetCursorPos GetDC GetDesktopWindow GetForegroundWindow GetLastInputInfo GetShellWindow MessageBoxA MsgWaitForMultipleObjects ReleaseDC ShowWindow

wininet

InternetCloseHandle InternetOpenA

ws2_32

WSACleanup WSAStartup socket

Name

.text

Size

206KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

276B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

58KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_790c42e33ae3cd84cd1d41bc8de51c99_conti_elex

advapi32

bcrypt

gdi32

iphlpapi

kernel32

msvcrt

shell32

user32

wininet

ws2_32

generic