Deep Malware Analysis of ebb91e753c286918e407d549b3c3d938 | md5: ebb91e753c286918e407d549b3c3d938 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | .Net | SOS: 0.46

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Medium

MD5	ebb91e753c286918e407d549b3c3d938
Sha1	532ef8dc30d9f2d04a8349dd9163a2f8825cf1b6
Sha256	6083bbc3a1a11f9d456b9302d01a1245e1e9c83ddd36efb573851eb6512dfbd5
Sha384	47f0d10e56cfa642410966703c2792eba2a0161febd2eb8ae26269e3baeba6aeb7a615f238be9179d53e9f691093dd18
Sha512	f30f7beef453de631488e9ec3bf36978a8bc4b87da99b9b910cc85aa2a8b51519f71f19ba1638dcae726200fb7a7bbee837fd171194b301543ce98ebc7e6d6cf
SSDeep	12288:mXCQ+3whei8hvBCzNsCGeIzbXPsan8M0Oiz19c6+l+o5UnMO4jzR:m3h30Czy//sanX0Pz8TsazOa
TLSH	0FF4121A72DD9B02E46A2BFD4871F1B123B87C6DAA21D6095FC6BEDF7826F500500727

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	NHtN.exe
Full Name	NHtN.exe
EntryPoint	System.Void ClockworkSpider.Program::Main()
Scope Name	NHtN.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	NHtN
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	286
Main Method	System.Void ClockworkSpider.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void ClockworkSpider.HauptForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`