2026-08-20_1f5de10963d376576f36b8fe2e2403fc_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_1f5de10963d376576f36b8fe2e2403fc_conti
Size 350KB
Sample260820-xypffaxtdt
SHA256 1ee789124f2c5e1fc37cead202d4fd42a49f1d9517c9b74446fafe916c143725
MD5 1f5de10963d376576f36b8fe2e2403fc
SHA1 563ac39cb7f957fb1fe37beb2ee6a66939b26eec
SHA512 e228189912f5cd3f81ec8f5c00063b24912ae586b422753e99dbcdef579bcdea6870e6b68828c153e06a3809baf55537cc99dc351f05651306504c188c723768
SSDEEP 6144:/y0VXhHdR4AVZUmwcB6UmJmH/74kc7PwQU/z:XVXbRZVZomHT4PwQ6
TLSH
T15E746C85FBD55CEACA0651358D9B43BD7338FAE02A835B1B092C72341E23AD1ED92717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_1f5de10963d376576f36b8fe2e2403fc_conti

File Explorer

2026-08-20_1f5de10963d376576f36b8fe2e2403fc_conti

.exe 350KB

2026-08-20_1f5de10963d376576f36b8fe2e2403fc_conti

IMPHASH e540db624a8d613640d4897d3e315a9a
SHA256 1ee789124f2c5e1fc37cead202d4fd42a49f1d9517c9b74446fafe916c143725
MD5 1f5de10963d376576f36b8fe2e2403fc
SHA1 563ac39cb7f957fb1fe37beb2ee6a66939b26eec
SHA512 e228189912f5cd3f81ec8f5c00063b24912ae586b422753e99dbcdef579bcdea6870e6b68828c153e06a3809baf55537cc99dc351f05651306504c188c723768
SSDEEP 6144:/y0VXhHdR4AVZUmwcB6UmJmH/74kc7PwQU/z:XVXbRZVZomHT4PwQ6
TLSH
T15E746C85FBD55CEACA0651358D9B43BD7338FAE02A835B1B092C72341E23AD1ED92717
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCloseKey RegOpenKeyExA RegSetValueExA

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject GetDIBits GetObjectA SelectObject

kernel32

CloseHandle CopyFileA CreateDirectoryA CreateFileA CreateThread DeleteCriticalSection DeleteFileA EnterCriticalSection ExpandEnvironmentStringsA FindClose FindFirstFileA FindNextFileA GetCPInfo GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetStartupInfoA GetTickCount InitializeCriticalSection IsDBCSLeadByte LeaveCriticalSection MultiByteToWideChar SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile

msvcrt

_XcptFilter ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _commode _errno _exit _fmode _initterm _localtime64 _stricmp _time64 abort atexit calloc exit fclose fflush fopen fprintf fputc fputwc fread free fseek fwprintf ftell fwrite localeconv malloc memcpy memset rewind setvbuf strcmp strerror strftime strlen strncmp strncpy vfprintf wcslen

user32

CallNextHookEx DispatchMessageA GetDC GetForegroundWindow GetKeyboardState GetMessageA GetSystemMetrics GetWindowTextA MapVirtualKeyA ReleaseDC SetWindowsHookExA ToAscii TranslateMessage UnhookWindowsHookEx

winhttp

WinHttpAddRequestHeaders WinHttpCloseHandle WinHttpConnect WinHttpOpen WinHttpOpenRequest WinHttpReceiveResponse WinHttpSendRequest

Name

.text

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_1f5de10963d376576f36b8fe2e2403fc_conti

advapi32

gdi32

kernel32

msvcrt

user32

winhttp

generic