2026-10-22_3286d17d0b4314617fbff2a626a7f3d1_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_3286d17d0b4314617fbff2a626a7f3d1_conti
Size 447KB
Sample261024-vtepbscz2p
SHA256 87b4c69649492a7c45fc2bb1acf16da0d16c8472a195a9c9685a18442df98e1f
MD5 3286d17d0b4314617fbff2a626a7f3d1
SHA1 ba0121defab06aaa920da6edcf90d0122943cf36
SHA512 21a6efcd05915b30e57c825861b3e55740b127ac0a9ae6bdd9f8b14d2f6f0f3717e3d36fa9e3a07d47200059944541b0dc83f5469bf02fa505cca3806cb70dde
SSDEEP 6144:bVXRfCPc5NdMVJPgpjdjXYPmmIe0w/Rr0DbNFKtxE:TfCLyyQe0wCetxE
TLSH
T1B1A46C97EBC4DE96C616033548E7431A237FF1F063479F172924AA342F27B907E92A49
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_3286d17d0b4314617fbff2a626a7f3d1_conti

File Explorer

2026-10-22_3286d17d0b4314617fbff2a626a7f3d1_conti

.exe 447KB

2026-10-22_3286d17d0b4314617fbff2a626a7f3d1_conti

IMPHASH d05b501f28fb8477fbc75339bc38a29e
SHA256 87b4c69649492a7c45fc2bb1acf16da0d16c8472a195a9c9685a18442df98e1f
MD5 3286d17d0b4314617fbff2a626a7f3d1
SHA1 ba0121defab06aaa920da6edcf90d0122943cf36
SHA512 21a6efcd05915b30e57c825861b3e55740b127ac0a9ae6bdd9f8b14d2f6f0f3717e3d36fa9e3a07d47200059944541b0dc83f5469bf02fa505cca3806cb70dde
SSDEEP 6144:bVXRfCPc5NdMVJPgpjdjXYPmmIe0w/Rr0DbNFKtxE:TfCLyyQe0wCetxE
TLSH
T1B1A46C97EBC4DE96C616033548E7431A237FF1F063479F172924AA342F27B907E92A49
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5392

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

kernel32

CloseHandle ContinueDebugEvent CreateFileW CreateProcessA DebugActiveProcess DeleteCriticalSection EnterCriticalSection ExitProcess FileTimeToSystemTime FormatMessageA GenerateConsoleCtrlEvent GetCurrentDirectoryA GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileAttributesW GetFileInformationByHandle GetFileSize GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoA GetSystemDirectoryW GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryExW MultiByteToWideChar OpenProcess QueryPerformanceCounter ReadFile ReadProcessMemory RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetConsoleCtrlHandler SetFilePointer SetLastError SetThreadPriority SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForDebugEvent WideCharToMultiByte WriteProcessMemory

msvcrt

___lc_codepage_func __argv __dllonexit __getmainargs __initenv __iob_func __lconv_init __mb_cur_max __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _fmode _errno _initterm _lock _onexit _setmode _strdup _strlwr _time64 _unlock abort calloc exit fclose fflush fopen fprintf fputc fputs free fwrite getenv islower isspace isupper localeconv malloc perror realloc setvbuf signal strerror strncmp strtok vfprintf wcslen

ntdll

NtQueryObject NtSetInformationProcess __C_specific_handler _strnicmp atoi isalpha mbstowcs memcmp memcpy memmove qsort strcat strchr strcmp strcpy strcspn strlen strncat strncpy strpbrk strrchr strstr strtoul wcschr wcscmp wcscpy wcsncat wcsrchr wcstombs

Name

.text

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

162KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

90KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/92

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_3286d17d0b4314617fbff2a626a7f3d1_conti

advapi32

kernel32

msvcrt

ntdll

generic