2026-08-08_dc62307f5a625297d629da33eb899a8b_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_dc62307f5a625297d629da33eb899a8b_conti
Size 874KB
Sample260808-gd2l9svsds
SHA256 b5a14473d24aa7ffa98173cddcc4fdbbf010b0bb3fc1470dde0786db78e1e0de
MD5 dc62307f5a625297d629da33eb899a8b
SHA1 2a21ad298b504b9d0d5b185fc5e1ab82356ed204
SHA512 cb019669ac68235db16e2587e63a2fb6317a427b6fb88a584204688ace281376b37a0b8e75ab58a3ceafcefd31dba5358fc91de4a7cb59acf58a64531933648c
SSDEEP 12288:YvgRuDHZTDIQZiy1YAJOSl7wxQFnSHEGYjd1wokv:YIRAZTDRZiyurUGYjd1wokv
TLSH
T11315398336DB0CFAEE832B7855DB533AA739FE708B2A4B674114D2312D135D1AD6A740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_dc62307f5a625297d629da33eb899a8b_conti

File Explorer

2026-08-08_dc62307f5a625297d629da33eb899a8b_conti

.exe 874KB

2026-08-08_dc62307f5a625297d629da33eb899a8b_conti

IMPHASH 2b876dc83beeed844e4b83f7e79c2541
SHA256 b5a14473d24aa7ffa98173cddcc4fdbbf010b0bb3fc1470dde0786db78e1e0de
MD5 dc62307f5a625297d629da33eb899a8b
SHA1 2a21ad298b504b9d0d5b185fc5e1ab82356ed204
SHA512 cb019669ac68235db16e2587e63a2fb6317a427b6fb88a584204688ace281376b37a0b8e75ab58a3ceafcefd31dba5358fc91de4a7cb59acf58a64531933648c
SSDEEP 12288:YvgRuDHZTDIQZiy1YAJOSl7wxQFnSHEGYjd1wokv:YIRAZTDRZiyurUGYjd1wokv
TLSH
T11315398336DB0CFAEE832B7855DB533AA739FE708B2A4B674114D2312D135D1AD6A740
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

AdjustTokenPrivileges InitiateSystemShutdownW LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyExA RegCreateKeyExW RegDeleteValueA RegOpenKeyExA RegSetValueExA RegSetValueExW

gdi32

Arc CreateFontW CreatePen CreateSolidBrush DeleteObject Ellipse GetStockObject LineTo MoveToEx Polygon Rectangle SelectObject SetBkMode SetTextColor

kernel32

Beep CloseHandle CreateEventA CreateProcessW CreateSemaphoreA DeleteCriticalSection DeleteFileW DuplicateHandle EnterCriticalSection FormatMessageA GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetLastError GetModuleFileNameW GetModuleHandleA GetProcAddress GetProcessAffinityMask GetStartupInfoA GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount InitializeCriticalSection IsDBCSLeadByte IsProcessorFeaturePresent LeaveCriticalSection LocalFree OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseSemaphore ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEvent SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject

api-ms-win-crt-convert-l1-1-0

mbrtowc mbsrtowcs strtoul wcrtomb

api-ms-win-crt-environment-l1-1-0

__p__environ getenv

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc realloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale localeconv

api-ms-win-crt-math-l1-1-0

__setusermatherr sinf

api-ms-win-crt-private-l1-1-0

__intrinsic_setjmp longjmp memchr memcmp memcpy memmove strchr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p__acmdln _assert _beginthreadex _cexit _configure_narrow_argv _crt_atexit _endthreadex _errno _exit _initialize_narrow_environment _seh_filter_exe _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit strerror system

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf _fileno _read _setmode _write fflush fputc fputs fwrite setvbuf

api-ms-win-crt-string-l1-1-0

_strdup memset strcmp strlen strncmp strnlen wcscat_s wcslen wcsnlen

api-ms-win-crt-utility-l1-1-0

rand rand_s

shell32

SHGetFolderPathW

user32

BeginPaint CallNextHookEx CreateWindowExW DefWindowProcW DispatchMessageW DrawTextW EndPaint FillRect GetAsyncKeyState GetClientRect GetMessageW GetSystemMetrics GetWindowTextW InvalidateRect KillTimer MessageBoxW PostQuitMessage RegisterClassW SetFocus SetTimer SetWindowTextW SetWindowsHookExA ShowWindow TranslateMessage UnhookWindowsHookEx wsprintfW

Name

.text

Size

194KB

Virtual Size

194KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

496B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

77KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

913B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_dc62307f5a625297d629da33eb899a8b_conti

advapi32

gdi32

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

shell32

user32

generic