Overview

overview

10

Static

static

10

Nursultan ...24.exe

windows7-x64

10

Nursultan ...24.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Nursultan Crack fix 1.16.5 7.01.2024.exe

  • Size

    148KB

  • MD5

    6a1f1f3bd1723f9697ac446f54e6c993

  • SHA1

    c6a802efa0b4f3accecf7d42551c791a17d1d8ed

  • SHA256

    56b07f414b33a840c0e8412bc686d7c1670244ffd67e51d641e8c8a446d834ac

  • SHA512

    b81ae5e2eeaf33e99bef3dc1aec5a77da6b72447b4198e80c92783f1f1f7e3ae5a89cff06ad10af95acb6279e247e3f670def771279c31e355273994c26a180f

  • SSDEEP

    3072:hYUhe/2YY7fbH8MH+tOERDbuAs0FNmhMnuIhN5:hiJY7bL+JOY1

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %Public%

  • install_file

    system32.exe

  • pastebin_url

    https://pastebin.com/raw/RQggYJCZ

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan Crack fix 1.16.5 7.01.2024.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections