Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Nursultan.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Nursultan.exe

  • Size

    336KB

  • MD5

    11ea5b76e048445966e926c28a2875c8

  • SHA1

    86cceae0f4107c4a7a4a43cf109b259c6c416083

  • SHA256

    131caa81db3d4289abcead59e78047a30e587b3672269aafbee6c69773f06132

  • SHA512

    50a2df57d0ab34570884ec4b03cb6f76828f7a113712a84908112df31a72d79a80924ccbad0ffbe01125e232ef4d5a57141aee3abe8a4b8abfb24aafef22ce50

  • SSDEEP

    3072:nvrQkJaztJqA3XbmJPO4AfNUyInA/e0dV9O8W4JWGh0hWT:nvr1SJDXbOqip0dV9O8W4w

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

7.tcp.eu.ngrok.io:14058

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.