General

  • Target

    Nursultan Beta.rar

  • Size

    392KB

  • MD5

    aff45d938aa8753edeb047abd739e54c

  • SHA1

    3958816eefbe0e29e8c4ceee6f6caefb52fcb53c

  • SHA256

    bd184a1270eb3d6e7c419cdf1b19011ef722c34b738684959d764db44367bdb5

  • SHA512

    bd3f893aa0820b06207469aa7c8055bcf58d8ba8b417236437286b5e96fcedbf26aae7ce269a32ae13bb49ce09d5ca39bd187c97cab48d820ebc236f33e8b5a2

  • SSDEEP

    12288:UWskH6zXkFLMbezRZibiNZNK+0JZjWrCl8jVDK9fzWcNhlh:UXTkhT/Cixp0Jzl8jo5zDh3

Score
10/10

Malware Config

Signatures

  • 44caliber family
  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan Beta.rar
    .rar

    Password: fluger crack

  • Nursultan Beta.exe
    .exe windows:4 windows x86 arch:x86

    Password: fluger crack


    Headers

    Sections