2026-09-26_b45f9839995e9055d39dd2fa0b6f13ca_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-26_b45f9839995e9055d39dd2fa0b6f13ca_conti
Size 92KB
Sample260926-tt2y7axcpg
SHA256 406949e149995b62c2246c03b1cd20e2de1caa43077f794273ba6a9d54171dd4
MD5 b45f9839995e9055d39dd2fa0b6f13ca
SHA1 3a0f6dfe87863920883f55dbe179e9e710cfb3ec
SHA512 6aa858f560271f8d8a5f200eca40babdead2af98986507a2c946b28604f3b280953bf69060c223c0f0f53c9214e4a8ca4989ce3556aeed9dac1cdeba0ffb8a86
SSDEEP 1536:wSdcAQ35S7JbTOrWhkSQLFkWGKdsEKdO7Vu7DI1CVjd75q7Iqrct7AG8Du6+WSsR:wSdq5SdbTOrWhkSQL7GKdsEKdO7Vu7DQ
TLSH
T153936C27E7A34859C06DC27DA4F917332B77F8199262AF9A739CD1310F227102FA9694
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-26_b45f9839995e9055d39dd2fa0b6f13ca_conti

File Explorer

2026-09-26_b45f9839995e9055d39dd2fa0b6f13ca_conti

.exe 92KB

2026-09-26_b45f9839995e9055d39dd2fa0b6f13ca_conti

IMPHASH 75ee85bd000833bd5e86e6186ae91daa
SHA256 406949e149995b62c2246c03b1cd20e2de1caa43077f794273ba6a9d54171dd4
MD5 b45f9839995e9055d39dd2fa0b6f13ca
SHA1 3a0f6dfe87863920883f55dbe179e9e710cfb3ec
SHA512 6aa858f560271f8d8a5f200eca40babdead2af98986507a2c946b28604f3b280953bf69060c223c0f0f53c9214e4a8ca4989ce3556aeed9dac1cdeba0ffb8a86
SSDEEP 1536:wSdcAQ35S7JbTOrWhkSQLFkWGKdsEKdO7Vu7DI1CVjd75q7Iqrct7AG8Du6+WSsR:wSdq5SdbTOrWhkSQL7GKdsEKdO7Vu7DQ
TLSH
T153936C27E7A34859C06DC27DA4F917332B77F8199262AF9A739CD1310F227102FA9694
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

86208

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

msys-gettextsrc-0-22-5

check_msgid_msgstr_format_i check_plural_eval dir_list_append extract_plural_expression fuzzy_search_goal_function gram_max_allowed_errors handle_filepos_comment_option iconv_message_list iconv_msgdomain_list input_format_po input_format_properties input_format_stringtable is_message_list_iconvable message_alloc message_comment_append message_comment_dot_append message_comment_filepos message_copy message_list_alloc message_list_append message_list_free message_list_list_alloc message_list_list_append message_list_list_append_list message_list_list_free message_list_list_search message_list_prepend message_list_search message_page_width_ignore message_page_width_set message_print_style_comment message_print_style_escape message_print_style_filepos message_print_style_indent message_print_style_uniforum msgdomain_list_alloc msgdomain_list_equal msgdomain_list_print msgdomain_list_sort_by_filepos msgdomain_list_sort_by_msgid msgdomain_list_sublist output_format_po output_format_properties output_format_stringtable po_charset_ascii po_charset_canonicalize po_charset_character_iterator po_charset_utf8 po_gram_error_at_line po_xerror possible_format_p read_catalog_file string_list_alloc string_list_append string_list_free

msys-intl-8

libintl_bindtextdomain libintl_gettext libintl_setlocale libintl_textdomain

msys-gettextlib-0-22-5

_obstack_begin _obstack_free _obstack_newchunk c_strncasecmp c_strstr close_stdout copy_file_preserving find_backup_file_name freea hash_destroy hash_find_entry hash_init hash_insert_entry hash_iterate hash_iterate_modify hash_set_value last_component maybe_print_progname program_name proper_name rpl_free rpl_strtol set_program_name simple_backup_suffix xget_version xmalloc xmmalloca xnmalloc xrealloc xstrdup

msys-2.0

__cxa_atexit __getreent __main _dll_crt0 _impure_ptr abort calloc cygwin_internal dll_dllcrt0 error error_message_count error_print_progname exit fprintf fputc fputs free getenv getopt_long malloc memchr memcmp memcpy memset msys_detach_dll optarg optind posix_memalign printf pthread_mutex_init pthread_mutex_lock pthread_mutex_unlock putchar qsort realloc sqrt stpcpy stpncpy strchr strcmp strcpy strcspn strlen

kernel32

GetModuleHandleA GetModuleHandleW

Name

.text

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

516B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

45KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-26_b45f9839995e9055d39dd2fa0b6f13ca_conti

msys-gettextsrc-0-22-5

msys-intl-8

msys-gettextlib-0-22-5

msys-2.0

kernel32

generic