General

  • Target

    Nursultan_FREE_2024.rar

  • Size

    169.0MB

  • MD5

    bbeb5dc587fd2a97cce9f9463a039ccd

  • SHA1

    5f6b01329836e125a5017e7a61f184a94c9aa377

  • SHA256

    5e8ca8067fb580fe145c94ded517bfcb976517ccb31e50aadc13be7a6d80f576

  • SHA512

    ba341d75f18f6d6bc55e876e3bfa357b1fde0d8a5e3c25ec45c72840a3440ca5c4ec4e53f3b2429b4c74699d7e4765b7caff75ee17fa62a41eb4e9b9c385595c

  • SSDEEP

    3145728:C2WmSDDI4VV/IXXFio95ER6bpdVhje9dhZMKHhh+jV3n5iyWKcLMlESZ83yrRz:C2/SDk4b/8CR63VhjePhZlT+pnPWKqMJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan_FREE_2024.rar
    .rar
  • OpenAL.dll
    .dll windows:10 windows x64 arch:x64

    3bb24f0163134cf8fcf6dc8629fc55b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SAPIWrapper_x64.dll
    .dll windows:10 windows x64 arch:x64

    37f36530f65f5a4512a8e7623ff82f96


    Headers

    Imports

    Exports

    Sections

  • assets.rar
    .rar
  • jemalloc.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lwjgl.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    beb2db5d92305822a7e3079c92c35535


    Headers

    Imports

    Exports

    Sections

  • lwjgl_opengl.dll
    .dll windows:5 windows x86 arch:x86

    611b567a99ac191fb212bbac9d4effde


    Headers

    Imports

    Exports

    Sections

  • lwjgl_stb.dll
    .dll windows:10 windows x64 arch:x64

    b0275a4d62320e45591c6c976da5ab6d


    Headers

    Imports

    Exports

    Sections

  • minecraft.jar
    .jar
  • natives.rar
    .rar
  • natives/Nursultan.dll
    .dll windows:6 windows x64 arch:x64

    fd120ede81f6e0fb054691e0fd54f77a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • natives/OpenAL.dll
    .dll windows:6 windows x64 arch:x64

    d7511036a8ab3c1f6367c84b66c75df4


    Headers

    Imports

    Exports

    Sections

  • natives/SAPIWrapper_x64.dll
    .dll windows:6 windows x64 arch:x64

    6159d78f91fdaebe8b20aac0d9eaf0d0


    Headers

    Imports

    Exports

    Sections

  • natives/glfw.dll
    .dll windows:6 windows x64 arch:x64

    58606f4b6ebb14019ff3ec989565a852


    Headers

    Imports

    Exports

    Sections

  • natives/jemalloc.dll
    .dll windows:6 windows x64 arch:x64

    4cebee0c2e86a2cfd8bec589b63f27eb


    Headers

    Imports

    Exports

    Sections

  • natives/lwjgl.dll
    .dll windows:6 windows x64 arch:x64

    80e5064fe27ad168f104ade5d32c625a


    Headers

    Imports

    Exports

    Sections

  • natives/lwjgl_opengl.dll
    .dll windows:6 windows x64 arch:x64

    b508098507058cf77c5e15413d8de916


    Headers

    Imports

    Exports

    Sections

  • natives/lwjgl_stb.dll
    .dll windows:6 windows x64 arch:x64

    1498494ca423cc0c42a7ee3271ecb913


    Headers

    Imports

    Exports

    Sections

  • natives/lwjgl_tinyfd.dll
    .dll windows:6 windows x64 arch:x64

    dfb73bbe8436060ace467b0b58794e1d


    Headers

    Imports

    Exports

    Sections

  • start.bat