254559fa505cfe6b680dc477cfe11dba

PE Executable

MD5: 254559fa505cfe6b680dc477cfe11dba

Size: 1.26 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

1.26 MB · 1,259,520 B

First seen

2026-08-19 23:15 · 2 months ago

Last seen

2026-08-19 23:15 · 2 months ago

Last analysis

2026-08-19 23:15 · 2 months ago

Hashes

MD5 254559fa505cfe6b680dc477cfe11dba Sha1 bfc24227d23288b828b7af4d357875a038ae12c3 Sha256 d86bf7e59e6320920f737526089e4dfac56bacf346ae60d6d6bce015b33953cb Sha384 df0a92e7a5e5f150835802b5e85ed49cdb29271a48f41cd78978d255fac5b454f5b36ef49487c5cf3a1d2113c0c65083 Sha512 9a3cccfd2efba6f8e367f7025ad9fb3df011f5f2104131779f3e9b28d76fbd4e5e320dee3eb1d28f9757e2cd511349f1cef9060db714d3c3f5fdea70d0fbba9a SSDeep 24576:almh9QxzhxVYrMcr7oiDkPeJaRr9aGyPSLXDy7oSS9jLN:o49+V+iK9EXWsx9 TLSH EF455B027E54CE12F0192233D2EF454847B499516AA7E32B7DBA37AD25123A73D0DACF

Detection

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Symbol obfuscation

Very high

1 malicious · 4 files

EXE254559fa505cfe6b680dc477cfe11dba

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BIN.Net Resources

BINObKfOHcA3T9jIDyHsY.XeKrDE5aUivA2vHRFV

BINIWopIjPGgBvoJ9oFwy.MIjOEMExIhA1GRPSLo

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:rsrc>bin

Shape pe:exe>pe:rsrc>bin

malicious 3 nodes

Path pe:exe>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Module Name	NvYvwYaHfSvz0Im8wUnJntT5ZvvDjV
Full Name	NvYvwYaHfSvz0Im8wUnJntT5ZvvDjV
EntryPoint	System.Void xY5vZBv4uAC5MC9crrc.Pav1wYvJVINpDJmduy3::LklCa7NB7l()
Scope Name	NvYvwYaHfSvz0Im8wUnJntT5ZvvDjV
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	m4y9VslePsPWTCZyi
Assembly Version	2.3.1.4
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	63
Main Method	System.Void xY5vZBv4uAC5MC9crrc.Pav1wYvJVINpDJmduy3::LklCa7NB7l()
Main IL Instruction Count	14
Main IL	`br.s IL_000B: ldc.i4.0 call <null> ldnull <null> ldc.i4.0 <null> ldelem.ref <null> pop <null> ldc.i4.0 <null> brtrue.s IL_0007: ldnull call System.Void vILmX3NAC6JdJndoqXD.jYL63nNYh8q9YWocHXX::kLjw4iIsCLsZtxc4lksN0j() nop <null> ldsfld System.Object xY5vZBv4uAC5MC9crrc.Pav1wYvJVINpDJmduy3::tPPC6b0vw2 callvirt System.Void yPWrqKvY28wty61AvYD.XyYYk0vIZxqYF7ar9ES::g60BuqmCiR() nop <null> ret <null>`
Module Name	NvYvwYaHfSvz0Im8wUnJntT5ZvvDjV
Full Name	NvYvwYaHfSvz0Im8wUnJntT5ZvvDjV
EntryPoint	System.Void xY5vZBv4uAC5MC9crrc.Pav1wYvJVINpDJmduy3::LklCa7NB7l()
Scope Name	NvYvwYaHfSvz0Im8wUnJntT5ZvvDjV
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	m4y9VslePsPWTCZyi
Assembly Version	2.3.1.4
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	63
Main Method	System.Void xY5vZBv4uAC5MC9crrc.Pav1wYvJVINpDJmduy3::LklCa7NB7l()
Main IL Instruction Count	14
Main IL	`br.s IL_000B: ldc.i4.0 call <null> ldnull <null> ldc.i4.0 <null> ldelem.ref <null> pop <null> ldc.i4.0 <null> brtrue.s IL_0007: ldnull call System.Void vILmX3NAC6JdJndoqXD.jYL63nNYh8q9YWocHXX::kLjw4iIsCLsZtxc4lksN0j() nop <null> ldsfld System.Object xY5vZBv4uAC5MC9crrc.Pav1wYvJVINpDJmduy3::tPPC6b0vw2 callvirt System.Void yPWrqKvY28wty61AvYD.XyYYk0vIZxqYF7ar9ES::g60BuqmCiR() nop <null> ret <null>`

1 malicious · 4 files

EXE254559fa505cfe6b680dc477cfe11dba

Structure

BINResources

BIN.Net Resources

No malware configuration was found at this point.