2026-10-28_4444169ce34ad4707f2a84b54d54d22a_conti

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-28_4444169ce34ad4707f2a84b54d54d22a_conti
Size 902KB
Sample261030-ghvphshv7t
SHA256 05faa511748fb81ce5a07006fd329e0ff2d8cc57258dfec47cb7c67dacb98fdd
MD5 4444169ce34ad4707f2a84b54d54d22a
SHA1 26ac8fe1a2ef35462096378bd5150545684a83d7
SHA512 2638f01c247b1bd471a2e08cdf87ed002d2d50ff8cdaf5114d55342bef60da488c2f2c29fdb18809c086f6bbc33312971e8074ebdd4d199394e14622dd0b24b3
SSDEEP 24576:Zz5gSXJQE7zZaOAvNQG3cDFs9EGsaDB0ZkD6:1JQ2APcZp+DukD6
TLSH
T1BB150113A6033AE9C543E434D992D3B46FB1BC7006D29A371284F7794D36846BF9AB63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_4444169ce34ad4707f2a84b54d54d22a_conti

File Explorer

2026-10-28_4444169ce34ad4707f2a84b54d54d22a_conti

.exe 902KB

2026-10-28_4444169ce34ad4707f2a84b54d54d22a_conti

IMPHASH ea4efaf75f068f3fcb4dc48ad0cec444
SHA256 05faa511748fb81ce5a07006fd329e0ff2d8cc57258dfec47cb7c67dacb98fdd
MD5 4444169ce34ad4707f2a84b54d54d22a
SHA1 26ac8fe1a2ef35462096378bd5150545684a83d7
SHA512 2638f01c247b1bd471a2e08cdf87ed002d2d50ff8cdaf5114d55342bef60da488c2f2c29fdb18809c086f6bbc33312971e8074ebdd4d199394e14622dd0b24b3
SSDEEP 24576:Zz5gSXJQE7zZaOAvNQG3cDFs9EGsaDB0ZkD6:1JQ2APcZp+DukD6
TLSH
T1BB150113A6033AE9C543E434D992D3B46FB1BC7006D29A371284F7794D36846BF9AB63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

libintl-8

libintl_bindtextdomain libintl_dgettext libintl_gettext libintl_set_relocation_prefix libintl_sprintf libintl_textdomain

libiconv-2

libiconv libiconv_close libiconv_open libiconv_set_relocation_prefix

kernel32

DeleteCriticalSection EnterCriticalSection EnumSystemLocalesA GetACP GetCurrentProcess GetCurrentThreadId GetFileType GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetProcAddress GetThreadLocale InitializeCriticalSection IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW MultiByteToWideChar SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue TryEnterCriticalSection VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __argv __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _assert _cexit _commode _errno _fileno _fmode _get_osfhandle _initterm _lock _setmode _strdup _unlock _write _write abort atexit calloc exit fclose ferror fflush fprintf fputc fputs free fwrite getc getenv isalnum isalpha isleadbyte isspace iswctype localeconv malloc memchr memcmp memcpy memset puts qsort raise realloc setlocale signal strchr strcmp strcpy strerror strlen strncmp strncpy strrchr toupper ungetc vfprintf wcslen

Name

.text

Size

86KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

UPX1

Size

763KB

Virtual Size

764KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_4444169ce34ad4707f2a84b54d54d22a_conti

libintl-8

libiconv-2

kernel32

msvcrt

generic