2026-09-03_e6ad2a896b917fc41f5f37d658e91b24_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-03_e6ad2a896b917fc41f5f37d658e91b24_conti
Size 884KB
Sample260905-zes1mahr21
SHA256 ff10b57bbe556404d8d3f0b1b0f449be719b0b3b4264c6166212593906246fc8
MD5 e6ad2a896b917fc41f5f37d658e91b24
SHA1 d79c2d8e900ae896c6bd128577b3c35d83c87abc
SHA512 1e314eb264b2175c8ca337bd29ee643e0132c0a2cf5a5915828866f34b029484db3c666f06882c5601a7630a0f4ce1b2447e74a8bd4bfa07894a550a41995915
SSDEEP 12288:nNLNPqgthc4hSfu0cE7j470qnFHfFkDCntESHP6fyQFuO0jyY7oyZ:FIgthc4heXcKjCPbO0jyY7oyZ
TLSH
T1D215F64326DB1CE9DED32B7864DB633AA735FE708B6A4B6B8108C1305C135D1AD2EB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-03_e6ad2a896b917fc41f5f37d658e91b24_conti

File Explorer

2026-09-03_e6ad2a896b917fc41f5f37d658e91b24_conti

.exe 884KB

2026-09-03_e6ad2a896b917fc41f5f37d658e91b24_conti

IMPHASH 9840aa023a4e1b048e3d533d579d0a38
SHA256 ff10b57bbe556404d8d3f0b1b0f449be719b0b3b4264c6166212593906246fc8
MD5 e6ad2a896b917fc41f5f37d658e91b24
SHA1 d79c2d8e900ae896c6bd128577b3c35d83c87abc
SHA512 1e314eb264b2175c8ca337bd29ee643e0132c0a2cf5a5915828866f34b029484db3c666f06882c5601a7630a0f4ce1b2447e74a8bd4bfa07894a550a41995915
SSDEEP 12288:nNLNPqgthc4hSfu0cE7j470qnFHfFkDCntESHP6fyQFuO0jyY7oyZ:FIgthc4heXcKjCPbO0jyY7oyZ
TLSH
T1D215F64326DB1CE9DED32B7864DB633AA735FE708B6A4B6B8108C1305C135D1AD2EB51
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

AllocateAndInitializeSid CheckTokenMembership FreeSid RegCloseKey RegDeleteValueW RegOpenKeyExW RegSetValueExW

kernel32

CloseHandle CopyFileW CreateDirectoryW CreateEventA CreateFileW CreateMutexW CreateProcessW CreateSemaphoreA CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileW DuplicateHandle EnterCriticalSection FormatMessageA GetCPInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileSizeEx GetLastError GetModuleFileNameW GetModuleHandleA GetProcAddress GetProcessAffinityMask GetStartupInfoW GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadPriority GetTickCount InitializeCriticalSection IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW LocalFree MoveFileExW MultiByteToWideChar OpenProcess OutputDebugStringA Process32FirstW Process32NextW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSemaphore RemoveDirectoryW ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEvent SetFileAttributesW SetFilePointerEx SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __iob_func __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _assert _beginthreadex _cexit _commode _endthreadex _errno _fileno _fmode _initterm _read _setjmp _setmode _strdup _vscprintf _vsnprintf _wcmdln _wcsicmp _write atexit abort calloc exit fflush fprintf fputc fputs free fwrite getenv localeconv longjmp malloc memchr memcmp memcpy memmove memset realloc setvbuf signal strchr strcmp strerror strlen strncmp strtol strtoul vfprintf wcslen

shell32

ShellExecuteExW ShellExecuteW

wininet

HttpQueryInfoW InternetCloseHandle InternetOpenUrlW InternetOpenW InternetReadFile InternetSetOptionW

Name

.text

Size

202KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

672B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

85KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-03_e6ad2a896b917fc41f5f37d658e91b24_conti

advapi32

kernel32

msvcrt

shell32

wininet

generic