General

  • Target

    Nursultan Beta.exe

  • Size

    1.5MB

  • MD5

    b8317db1ac92a4c14e7d0d8f3539ae43

  • SHA1

    22a2385c9bbfce788b08fc24f33f8a0adaefd78e

  • SHA256

    d0e3960cfc407d95abdf059048bef502b65dbd149d977ad44be858c9163d9e6c

  • SHA512

    e919b5e87bc12ea0a38ca844ad2cb7d554b80357944d9d53a5bd79cdff8e8206fc06e75f7b710e9c59a90345e42d531993704b8a77532f8bd22e162ce15f5993

  • SSDEEP

    12288:Sr4lDQ0JHD6AUsEp8zLghZM5Qr4lDQ0JHD6AUsEp8zDjuPKv7MYdzJaifWz3BY1q:ScdzJ9ubKQcdzJ9uwjxnWVwBjxnWVwc

Score
10/10

Malware Config

Signatures

  • 44caliber family
  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan Beta.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections