2026-09-26_7e8048e08200f794139a13dab1248324_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-26_7e8048e08200f794139a13dab1248324_conti
Size 73KB
Sample260926-yllz8azz2n
SHA256 947dcd4ab2d180d40481cd8433718f8b4351e67dda3377101abd143b785370c7
MD5 7e8048e08200f794139a13dab1248324
SHA1 1afb172e31be523576e6e6418be18b3672cd7df4
SHA512 07efa95cd80003a471f1cbf4ea1d41d0d5bf0b6cdde010893b7d09054514676dc093ab332dee9c932e71a30defe6bc6f9e104baaf30467398033efe926fba904
SSDEEP 1536:V7lj+uDZCaXedQnhJVxL2+9WWe9loKhJCBWJ:FB+uDZCCe6nh/xPWWCoKjCcJ
TLSH
T1E173391AA25710B8C592C1B056BF5773EB31F8251231BB2EB7ACD2343F22E546F5E624
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-26_7e8048e08200f794139a13dab1248324_conti

File Explorer

2026-09-26_7e8048e08200f794139a13dab1248324_conti

.exe 73KB

2026-09-26_7e8048e08200f794139a13dab1248324_conti

IMPHASH aeb092159e458271579697cf92ef87b9
SHA256 947dcd4ab2d180d40481cd8433718f8b4351e67dda3377101abd143b785370c7
MD5 7e8048e08200f794139a13dab1248324
SHA1 1afb172e31be523576e6e6418be18b3672cd7df4
SHA512 07efa95cd80003a471f1cbf4ea1d41d0d5bf0b6cdde010893b7d09054514676dc093ab332dee9c932e71a30defe6bc6f9e104baaf30467398033efe926fba904
SSDEEP 1536:V7lj+uDZCaXedQnhJVxL2+9WWe9loKhJCBWJ:FB+uDZCCe6nh/xPWWCoKjCcJ
TLSH
T1E173391AA25710B8C592C1B056BF5773EB31F8251231BB2EB7ACD2343F22E546F5E624
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

cyglzma-5

lzma_alone_decoder lzma_alone_encoder lzma_block_compressed_size lzma_block_header_decode lzma_check_is_supported lzma_check_size lzma_code lzma_cputhreads lzma_end lzma_file_info_decoder lzma_filters_free lzma_get_progress lzma_index_block_count lzma_index_checks lzma_index_end lzma_index_file_size lzma_index_iter_init lzma_index_iter_next lzma_index_iter_rewind lzma_index_stream_count lzma_index_uncompressed_size lzma_lzip_decoder lzma_lzma_preset lzma_memusage lzma_physmem lzma_properties_decode lzma_raw_decoder lzma_raw_decoder_memusage lzma_raw_encoder lzma_raw_encoder_memusage lzma_str_from_filters lzma_stream_decoder_mt lzma_stream_encoder lzma_stream_encoder_mt lzma_stream_encoder_mt_memusage lzma_version_number lzma_version_string

cygwin1

__cxa_atexit __errno __getreent __locale_ctype_ptr __main __stack_chk_fail __stack_chk_guard _dll_crt0 _impure_ptr alarm calloc clock_gettime close cygwin_detach_dll cygwin_internal dll_dllcrt0 exit fchmod fchown fclose fcntl fgetc fopen fprintf fputc fputs free fstat futimens getenv geteuid getopt_long isatty lseek lstat malloc mbrtowc mbsinit memcpy open optarg optind optreset pipe poll posix_fadvise posix_memalign printf program_invocation_name pthread_sigmask putchar puts raise read realloc sigaction sigaddset sigemptyset sigfillset snprintf stat strchr strcmp strerror strlen strrchr strstr unlink vfprintf vsnprintf wcwidth write

cygintl-8

libintl_bindtextdomain libintl_gettext libintl_ngettext libintl_setlocale libintl_textdomain

kernel32

GetModuleHandleA

Name

.text

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

704B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

292B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-26_7e8048e08200f794139a13dab1248324_conti

cyglzma-5

cygwin1

cygintl-8

kernel32

generic