2026-09-20_45a00974275715d4cd84280f7a5ddc21_conti_elex_floxif

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-20_45a00974275715d4cd84280f7a5ddc21_conti_elex_floxif
Size 126KB
Sample260920-yttp2adk6z
SHA256 a86c971defdb7a14ec4ee6a10c63ef543fe84f14a71550d7f9cccecbe128d9e4
MD5 45a00974275715d4cd84280f7a5ddc21
SHA1 088fcc6d3f00051ec2246127168db7db8e69d3d4
SHA512 418b0fe71f8246e697bdc743ef2a1942d37c05401115a7baf86d4f4d60060b558b1933d2a59b7568729c1062579107c1fb9e2a3ebb9d78ed6164971f33587f08
SSDEEP 3072:Fc3J0+xlOMf2lQBV+UdE+rECWp7hKNU06:ceXMjBV+UdvrEFp7hKC
TLSH
T104C3C0067582D3FEE462107030EE7F16A6F2893D00AF6C56DB5B4545DEED813968EA0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-20_45a00974275715d4cd84280f7a5ddc21_conti_elex_floxif

File Explorer

2026-09-20_45a00974275715d4cd84280f7a5ddc21_conti_elex_floxif

.exe 126KB

2026-09-20_45a00974275715d4cd84280f7a5ddc21_conti_elex_floxif

IMPHASH 94e9cdeefa86dab9831ce197b9a4fe44
SHA256 a86c971defdb7a14ec4ee6a10c63ef543fe84f14a71550d7f9cccecbe128d9e4
MD5 45a00974275715d4cd84280f7a5ddc21
SHA1 088fcc6d3f00051ec2246127168db7db8e69d3d4
SHA512 418b0fe71f8246e697bdc743ef2a1942d37c05401115a7baf86d4f4d60060b558b1933d2a59b7568729c1062579107c1fb9e2a3ebb9d78ed6164971f33587f08
SSDEEP 3072:Fc3J0+xlOMf2lQBV+UdE+rECWp7hKNU06:ceXMjBV+UdvrEFp7hKC
TLSH
T104C3C0067582D3FEE462107030EE7F16A6F2893D00AF6C56DB5B4545DEED813968EA0F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

CloseServiceHandle ControlService CreateServiceA CryptAcquireContextW CryptCreateHash CryptDestroyHash CryptDestroyKey CryptGetHashParam CryptHashData CryptImportKey CryptSetHashParam DeleteService OpenSCManagerA OpenServiceA QueryServiceStatus RegisterServiceCtrlHandlerA SetServiceStatus StartServiceA StartServiceCtrlDispatcherA

kernel32

CloseHandle CreateSemaphoreA CreateThread DeleteCriticalSection EnterCriticalSection FormatMessageA FormatMessageW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetStartupInfoA GetSystemTimeAsFileTime GetTickCount GetTimeZoneInformation InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter ReleaseSemaphore SetConsoleCtrlHandler SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObject

msvcrt

__argv __dllonexit __getmainargs __initenv _cexit __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _errno _fmode _getpid _initterm _iob _lock _onexit _stricmp _strnicmp _unlink _unlock _vsnprintf time localtime gmtime isupper abort calloc exit fclose ferror fflush fgets fopen fprintf fputc fputs free fwrite getenv islower isspace malloc memcmp memcpy memmove printf puts rand signal sprintf srand strcat strchr strcmp strcpy strerror strftime strlen strncat strncmp strncpy strrchr toupper vfprintf wcstombs

ws2_32

WSAGetLastError WSAStartup __WSAFDIsSet accept bind closesocket freeaddrinfo getaddrinfo getnameinfo getpeername getsockname listen recv select send setsockopt shutdown socket

Name

.text

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

772B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-20_45a00974275715d4cd84280f7a5ddc21_conti_elex_floxif

advapi32

kernel32

msvcrt

ws2_32

generic