2026-10-28_7c9936c5abde17403dec7cfd55059cfa_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-28_7c9936c5abde17403dec7cfd55059cfa_conti
Size 982KB
Sample261030-bn7ndada22
SHA256 f5771af6f04897ca816c1fdf281d7ca96bec72c36b89de87a66dd79d23747212
MD5 7c9936c5abde17403dec7cfd55059cfa
SHA1 28b485f1480bd453f8978d24a4cface17dc124fa
SHA512 3cbab11fe45d258d1d7e15b8350681831ad50ea3eac91acc33f07045870c8f64bd1b85f8b88a2e642538cc72ff6604d05ac78c3d1bd10396d26fd7ea2bda19a6
SSDEEP 24576:w71UUcR4n/zZaOAvNQG3cDFs9EGsaDB0ZkD6:RR4/APcZp+DukD6
TLSH
T1AB25F102E6032DF9D643A430C996E3F56D72BC600A92DD3B1280F7795E32C45AF5AB63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_7c9936c5abde17403dec7cfd55059cfa_conti

File Explorer

2026-10-28_7c9936c5abde17403dec7cfd55059cfa_conti

.exe 982KB

2026-10-28_7c9936c5abde17403dec7cfd55059cfa_conti

IMPHASH 2c3c77ce2e957fe10be77b6492881a21
SHA256 f5771af6f04897ca816c1fdf281d7ca96bec72c36b89de87a66dd79d23747212
MD5 7c9936c5abde17403dec7cfd55059cfa
SHA1 28b485f1480bd453f8978d24a4cface17dc124fa
SHA512 3cbab11fe45d258d1d7e15b8350681831ad50ea3eac91acc33f07045870c8f64bd1b85f8b88a2e642538cc72ff6604d05ac78c3d1bd10396d26fd7ea2bda19a6
SSDEEP 24576:w71UUcR4n/zZaOAvNQG3cDFs9EGsaDB0ZkD6:RR4/APcZp+DukD6
TLSH
T1AB25F102E6032DF9D643A430C996E3F56D72BC600A92DD3B1280F7795E32C45AF5AB63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

libintl-8

libintl_bindtextdomain libintl_dcngettext libintl_dgettext libintl_dngettext libintl_gettext libintl_set_relocation_prefix libintl_sprintf libintl_textdomain

libiconv-2

libiconv libiconv_close libiconv_open libiconv_set_relocation_prefix

kernel32

DeleteCriticalSection EnterCriticalSection EnumSystemLocalesA GetACP GetCurrentProcess GetCurrentThreadId GetFileType GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetProcAddress GetThreadLocale InitializeCriticalSection IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW MultiByteToWideChar SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue TryEnterCriticalSection VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __argv __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _assert _cexit _commode _errno _fileno _fmode _get_osfhandle _initterm _lock _strdup _strtoi64 _strtoui64 _unlock _write abort atexit calloc exit fclose ferror fflush fprintf fputc fputs free fwrite getenv isalnum isalpha isleadbyte isprint isspace iswctype localeconv malloc memchr memcmp memcpy memset puts raise realloc setlocale signal strchr strcmp strcpy strerror strlen strncmp strncpy strrchr toupper vfprintf wcslen

Name

.text

Size

149KB

Virtual Size

149KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

51KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

UPX1

Size

763KB

Virtual Size

764KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_7c9936c5abde17403dec7cfd55059cfa_conti

libintl-8

libiconv-2

kernel32

msvcrt

generic