Overview

overview

10

Static

static

10

nursultan.exe

windows7-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    nursultan.exe

  • Size

    1.1MB

  • MD5

    6f1f89c496b70f70c091164238a08ddf

  • SHA1

    065a2a84b9887eeef4f57d8c95f32fe1cbafa064

  • SHA256

    78ae31f8c2744b9b6686f0bfe71c121b00334f4ffc3249ec02bd6e1a78a6c5ce

  • SHA512

    5dc6111ba806ab60a4ae4d52d7502e19e59cbe88fe6593cea2595cb77a1e6f82c00fc528da92c05255561837e67c6881ad0e733da1fe39c7207b00277f9d1db2

  • SSDEEP

    24576:U2G/nvxW3Ww0tSYcKwMEyDzVKlCScqqnNka4KOlC:UbA30SYpw8VapvNA

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nursultan.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections