2026-08-30_d3b7f7f6474004fb64ad9e83372bc8a5_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-30_d3b7f7f6474004fb64ad9e83372bc8a5_conti
Size 186KB
Sample260831-ebe95scr6t
SHA256 cfc4d72d74908b6e2ab3d151e7fe65f1fdac17896279741f19576675acbf303c
MD5 d3b7f7f6474004fb64ad9e83372bc8a5
SHA1 43ad289b11d80aa8cac5c6f03a03cd10340e2365
SHA512 2c71766fb04e04f8d5ec716f5c7c572c882a91f973d8652c1cdfc8722673a8ecd4ea92d855d14a053bcb8657695e60ac8505c2757544f9a10d7ded87921f9f8b
SSDEEP 3072:RcFt1S8NcMVPr8t0bFoRnfRXb0IVggDSLbK9+Yd3q3jTic86j4xXQ8c:01Let0bFoRJoPLg9xMvic86El
TLSH
T1B514D01AEF8368ECD1AFC079A4E666B7B271B81901E0EEEF3548D1331F31D605E19859
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_d3b7f7f6474004fb64ad9e83372bc8a5_conti

File Explorer

2026-08-30_d3b7f7f6474004fb64ad9e83372bc8a5_conti

.exe 186KB

2026-08-30_d3b7f7f6474004fb64ad9e83372bc8a5_conti

IMPHASH 10c6c97eb4b6a404b9554b496a898693
SHA256 cfc4d72d74908b6e2ab3d151e7fe65f1fdac17896279741f19576675acbf303c
MD5 d3b7f7f6474004fb64ad9e83372bc8a5
SHA1 43ad289b11d80aa8cac5c6f03a03cd10340e2365
SHA512 2c71766fb04e04f8d5ec716f5c7c572c882a91f973d8652c1cdfc8722673a8ecd4ea92d855d14a053bcb8657695e60ac8505c2757544f9a10d7ded87921f9f8b
SSDEEP 3072:RcFt1S8NcMVPr8t0bFoRnfRXb0IVggDSLbK9+Yd3q3jTic86j4xXQ8c:01Let0bFoRJoPLg9xMvic86El
TLSH
T1B514D01AEF8368ECD1AFC079A4E666B7B271B81901E0EEEF3548D1331F31D605E19859
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

86062

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetLastError GetModuleHandleW GetProcAddress InitializeCriticalSection IsDBCSLeadByteEx IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW MultiByteToWideChar SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue VirtualProtect VirtualQuery WideCharToMultiByte __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fmode _initterm _localtime64 _lock _unlock abort atexit calloc _write exit fgets fprintf fputc free fwrite isspace localeconv malloc memcpy memset putchar puts setlocale signal strcmp strerror strftime strlen strncmp vfprintf wcslen

ws2_32

WSACleanup WSAStartup

libpsl-5

psl_builtin psl_builtin_file_time psl_builtin_filename psl_builtin_outdated psl_builtin_sha1sum psl_check_version_number psl_dist_filename psl_free psl_free_string psl_get_version psl_is_cookie_domain_acceptable psl_is_public_suffix psl_is_public_suffix2 psl_latest psl_load_file psl_registrable_domain psl_str_to_utf8lower psl_suffix_count psl_suffix_exception_count psl_suffix_wildcard_count psl_unregistrable_domain

Name

.text

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

272B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

136KB

Virtual Size

328KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-30_d3b7f7f6474004fb64ad9e83372bc8a5_conti

kernel32

msvcrt

ws2_32

libpsl-5

generic