2026-08-09_63deaf2f4baecca32af334566ca3579e_conti_elex_floxif

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_63deaf2f4baecca32af334566ca3579e_conti_elex_floxif
Size 126KB
Sample260809-f433cagh44
SHA256 555798dc7f978d49e97cff9f772a22d937bbd18cd358974c57927ab962924ad8
MD5 63deaf2f4baecca32af334566ca3579e
SHA1 5fd5c51b4b3bcd0c2ce19e9d148330033eab4dac
SHA512 6f9c8a21d1117fa255d274e8cb76447607ad28f0ae0a790caa118091f786680ddec14119a7432e483ef8db033761353fdcd206960abfccc4ea11496c1f115f3b
SSDEEP 1536:NTXCZXpnXXBZ9d/+xluNAJjZ/KRWpTN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIM:pc5Xz+xlOMf2lQBV+UdE+rECWp7hKU08
TLSH
T1C0C3C0467582D3FEE062007030BE6F16BAF2D93E01DF5C65DB9B88459EAD807528E64F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_63deaf2f4baecca32af334566ca3579e_conti_elex_floxif

File Explorer

2026-08-09_63deaf2f4baecca32af334566ca3579e_conti_elex_floxif

.exe 126KB

2026-08-09_63deaf2f4baecca32af334566ca3579e_conti_elex_floxif

IMPHASH 94e9cdeefa86dab9831ce197b9a4fe44
SHA256 555798dc7f978d49e97cff9f772a22d937bbd18cd358974c57927ab962924ad8
MD5 63deaf2f4baecca32af334566ca3579e
SHA1 5fd5c51b4b3bcd0c2ce19e9d148330033eab4dac
SHA512 6f9c8a21d1117fa255d274e8cb76447607ad28f0ae0a790caa118091f786680ddec14119a7432e483ef8db033761353fdcd206960abfccc4ea11496c1f115f3b
SSDEEP 1536:NTXCZXpnXXBZ9d/+xluNAJjZ/KRWpTN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIM:pc5Xz+xlOMf2lQBV+UdE+rECWp7hKU08
TLSH
T1C0C3C0467582D3FEE062007030BE6F16BAF2D93E01DF5C65DB9B88459EAD807528E64F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

CloseServiceHandle ControlService CreateServiceA CryptAcquireContextW CryptCreateHash CryptDestroyHash CryptDestroyKey CryptGetHashParam CryptHashData CryptImportKey CryptSetHashParam DeleteService OpenSCManagerA OpenServiceA QueryServiceStatus RegisterServiceCtrlHandlerA SetServiceStatus StartServiceA StartServiceCtrlDispatcherA

kernel32

CloseHandle CreateSemaphoreA CreateThread DeleteCriticalSection EnterCriticalSection FormatMessageA FormatMessageW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetStartupInfoA GetSystemTimeAsFileTime GetTickCount GetTimeZoneInformation InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter ReleaseSemaphore SetConsoleCtrlHandler SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObject

msvcrt

__argv __dllonexit __getmainargs __initenv _cexit __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _errno _fmode _getpid _initterm _iob _lock _onexit _stricmp _strnicmp _unlink _unlock _vsnprintf time localtime gmtime isupper abort calloc exit fclose ferror fflush fgets fopen fprintf fputc fputs free fwrite getenv islower isspace malloc memcmp memcpy memmove printf puts rand signal sprintf srand strcat strchr strcmp strcpy strerror strftime strlen strncat strncmp strncpy strrchr toupper vfprintf wcstombs

ws2_32

WSAGetLastError WSAStartup __WSAFDIsSet accept bind closesocket freeaddrinfo getaddrinfo getnameinfo getpeername getsockname listen recv select send setsockopt shutdown socket

Name

.text

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

772B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_63deaf2f4baecca32af334566ca3579e_conti_elex_floxif

advapi32

kernel32

msvcrt

ws2_32

generic