2026-08-30_cea99885bd70f1b4d374ae7c462fe9f5_conti_cryptbot_elex

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-30_cea99885bd70f1b4d374ae7c462fe9f5_conti_cryptbot_elex
Size 73KB
Sample260831-eq544sdj4w
SHA256 e49cfaf6a02e3ebe42ca60de71195b690f1ce3febd7b72752a9d2592c981bf90
MD5 cea99885bd70f1b4d374ae7c462fe9f5
SHA1 abe6c7ebb00e0843f0dddac4c4771bb7a05f852a
SHA512 5840a40f16030481567cd4c274c2ae231fb55c479ca9116f2d0a82ff2f3ef0949d392fcf0286a27e01f6d89c3b194292a673f46df701e3cc433774bf140f74c8
SSDEEP 1536:Vb/qpyErj/0y8rz0vTGB6s4vSqM0UAxWhzq:h2rTwrz0rAzWSq3Dshz
TLSH
T1F0732B99F6C350F0F66725F09A5BD7BF4631A6128034EEBAFF4D535DB932A026406206
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_cea99885bd70f1b4d374ae7c462fe9f5_conti_cryptbot_elex

File Explorer

2026-08-30_cea99885bd70f1b4d374ae7c462fe9f5_conti_cryptbot_elex

.exe 73KB

2026-08-30_cea99885bd70f1b4d374ae7c462fe9f5_conti_cryptbot_elex

IMPHASH 62b85f5a73d525e42cc3fcd3c974ba5c
SHA256 e49cfaf6a02e3ebe42ca60de71195b690f1ce3febd7b72752a9d2592c981bf90
MD5 cea99885bd70f1b4d374ae7c462fe9f5
SHA1 abe6c7ebb00e0843f0dddac4c4771bb7a05f852a
SHA512 5840a40f16030481567cd4c274c2ae231fb55c479ca9116f2d0a82ff2f3ef0949d392fcf0286a27e01f6d89c3b194292a673f46df701e3cc433774bf140f74c8
SSDEEP 1536:Vb/qpyErj/0y8rz0vTGB6s4vSqM0UAxWhzq:h2rTwrz0rAzWSq3Dshz
TLSH
T1F0732B99F6C350F0F66725F09A5BD7BF4631A6128034EEBAFF4D535DB932A026406206
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CloseHandle CreateConsoleScreenBuffer CreateFileW DeleteCriticalSection EnterCriticalSection FlushConsoleInputBuffer FreeLibrary GetConsoleScreenBufferInfo GetFileSize GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoW GetStdHandle InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA MultiByteToWideChar ReadConsoleInputW ReadFile SetConsoleActiveScreenBuffer SetConsoleCursorPosition SetConsoleScreenBufferSize SetConsoleTitleW SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WideCharToMultiByte WriteConsoleOutputCharacterW WriteFile

msvcrt

__mb_cur_max __p__commode __p__fmode __p__wcmdln __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _errno _initterm _iob _lock _onexit _unlock abort atoi calloc exit fprintf fputc fputwc free fwprintf fwrite localeconv malloc memcpy memmove memset setlocale realloc signal strchr strerror strlen strncmp swprintf_s vfprintf wcscpy_s wcslen

user32

GetAsyncKeyState GetKeyState

Name

.text

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-30_cea99885bd70f1b4d374ae7c462fe9f5_conti_cryptbot_elex

kernel32

msvcrt

user32

generic