General

  • Target

    NurSultan.exe

  • Size

    3.7MB

  • MD5

    ead85b526ec199f62f314a46dc5fe2e2

  • SHA1

    d134eebba66bdbcef8e233204fc11d9117b9e6bc

  • SHA256

    b44708ce1ba0ee2a5ffefab8b962f57a79e764bc7b848bf243000421595787b2

  • SHA512

    4f8e4afce072116bb6f25710068eff1dc2f71a6c138db7d4ac5f75f0792590c24956ed745cd90a757cd21934314b56a67bf55d962004946e277844daeb107184

  • SSDEEP

    98304:UbQbI3pWwD91S+WDUTh9ZxVfOevDqplOhPUd:UbJ1SeDZrGevwlO1Ud

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NurSultan.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections