6d8230a8409e083edd3cb303e6a53635

PE Executable

MD5: 6d8230a8409e083edd3cb303e6a53635

Size: 1.24 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	6d8230a8409e083edd3cb303e6a53635
Sha1	3bd8d30ef8e1b97dda07457a6180ccfe50435132
Sha256	e1e1241bdb6fce791c40c2bfaff61fa57ae8e61d17714f9b99b44670777d21e0
Sha384	1c68228e93f5010764f704e33a6b77c99a4f513c356f138a7021ca285684cbdebe63cb8f033645684b05907ee68966b1
Sha512	225d5482cee9f34a3ee175466c749853aed1e460fa73a8dae14cbdcdf1f15956676f80f5d77dbffcabfb08db93d72664f9adfa2e063e3372ac8ac3871b8373a6
SSDeep	24576:UFUNuA6gKEvNGvgmqrFRcZk54v5WC/ey8klqft4:kUggKE1GNIFCkqDW7S8
TLSH	DD450140236ED912D5F60BF01931D2B42BB8DE84A821D3079EEAFDEFB97A7456904353

STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2

Name	Value
Module Name	lPUd.exe
Full Name	lPUd.exe
EntryPoint	System.Void Services.Program::Main()
Scope Name	lPUd.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	lPUd
Assembly Version	1.0.3.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	378
Main Method	System.Void Services.Program::Main()
Main IL Instruction Count	20
Main IL	`nop <null> newobj System.Void Services.Form1::.ctor() stloc.0 <null> ldc.i4.5 <null> newobj System.Void Services.ProcessManager::.ctor(System.Int32) stloc.1 <null> nop <null> ldloc.0 <null> call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> nop <null> leave.s IL_0025: ret stloc.2 <null> nop <null> ldloc.1 <null> callvirt System.Void Services.ProcessManager::StopAllServicesAsync() nop <null> nop <null> leave.s IL_0025: ret ret <null>`
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: C:\Users\Administrator\Desktop\Client\Temp\lBdmDXthrR\src\obj\Debug\lPUd.pdb

No malware configuration was found at this point.

You must be signed in to view YARA rules.