2026-09-23_7e53bd621aacf57afeb43305856f766c_conti_elex

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-23_7e53bd621aacf57afeb43305856f766c_conti_elex
Size 627KB
Sample260924-grp6dsfe38
SHA256 fb97361359be423d73120bab4f20761fb38d997b8e434038eb83eb022ae8913c
MD5 7e53bd621aacf57afeb43305856f766c
SHA1 6f0cb6428bdc2413c8a7966ca1ad87ea46394523
SHA512 7a7fe85883ffb86d13b1b21d321e83056bbca48c17b8cc14ce473124af8d053910ed02909001ccde03ee3e306caa098441cbf76a6f0a44d741ad7279be6e6d08
SSDEEP 12288:o+JfKmKA49i/9jGV/UZ+zhEyN0SQdfzUs33RWt8nOVpYU8DjE/LzH2EzB3:ZJfKmKA4M/96VCSQqt6OVpYU8vAzHD3
TLSH
T196D45C8ADA0212F0D9078FB04C9BE3BBC6247735C126DD56FB8DCE49B4232935996367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-23_7e53bd621aacf57afeb43305856f766c_conti_elex

File Explorer

2026-09-23_7e53bd621aacf57afeb43305856f766c_conti_elex

.exe 627KB

2026-09-23_7e53bd621aacf57afeb43305856f766c_conti_elex

IMPHASH 3e3e8a092f99267e47280aecb9a3fd4c
SHA256 fb97361359be423d73120bab4f20761fb38d997b8e434038eb83eb022ae8913c
MD5 7e53bd621aacf57afeb43305856f766c
SHA1 6f0cb6428bdc2413c8a7966ca1ad87ea46394523
SHA512 7a7fe85883ffb86d13b1b21d321e83056bbca48c17b8cc14ce473124af8d053910ed02909001ccde03ee3e306caa098441cbf76a6f0a44d741ad7279be6e6d08
SSDEEP 12288:o+JfKmKA49i/9jGV/UZ+zhEyN0SQdfzUs33RWt8nOVpYU8DjE/LzH2EzB3:ZJfKmKA4M/96VCSQqt6OVpYU8vAzHD3
TLSH
T196D45C8ADA0212F0D9078FB04C9BE3BBC6247735C126DD56FB8DCE49B4232935996367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

comctl32

InitCommonControlsEx

comdlg32

GetOpenFileNameW

gdi32

CreateFontW CreateSolidBrush SetBkColor SetTextColor

kernel32

CloseHandle CreateDirectoryW CreateEventA CreateFileW CreateSemaphoreA CreateThread DeleteCriticalSection DeleteFileW DuplicateHandle EnterCriticalSection FindClose FindFirstFileW FindNextFileW FormatMessageA FreeLibrary GetCPInfo GetCommandLineW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileAttributesExW GetFileAttributesW GetLastError GetLocalTime GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessAffinityMask GetStartupInfoA GetSystemTime GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount InitializeCriticalSection IsDBCSLeadByte IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFree MoveFileExW MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSemaphore ResetEvent ResumeThread SetEvent SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread SystemTimeToFileTime TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile lstrcpynW

msvcrt

_XcptFilter __fpecode __getmainargs __lc_codepage __p__iob __p___initenv __p___mb_cur_max __p__acmdln __p__commode __p__fmode __pxcptinfoptrs __set_app_type __setusermatherr _assert _amsg_exit _beginthreadex _cexit _endthreadex _errno _exit _fileno _initterm _read _setjmp3 _setmode _strdup _vsnprintf _wcsicmp _wcsnicmp _write abort atexit atof atoi calloc exit fflush fputc fputs free fprintf fwrite getenv isspace localeconv longjmp malloc memchr memcmp memcpy memmove memset realloc setvbuf signal strchr strcmp strerror strlen strncmp strtoul towlower vfprintf wcscmp wcslen

ole32

CoInitializeEx CoTaskMemFree CoUninitialize

shell32

CommandLineToArgvW SHBrowseForFolderW SHGetPathFromIDListW

user32

CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW GetMessageW GetWindowLongW GetWindowTextLengthW GetWindowTextW LoadCursorW MessageBoxW PostQuitMessage RegisterClassW SendMessageW SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow TranslateMessage

ws2_32

WSAGetLastError WSAStartup accept bind closesocket htons inet_ntop listen recv select send setsockopt socket

Name

.text

Size

471KB

Virtual Size

471KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

512B

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

82KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

38KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

nwwhhyy

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-23_7e53bd621aacf57afeb43305856f766c_conti_elex

comctl32

comdlg32

gdi32

kernel32

msvcrt

ole32

shell32

user32

ws2_32

generic