Overview

overview

10

Static

static

10

NursultanLoader.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NursultanLoader.exe

  • Size

    1.5MB

  • MD5

    5841e08c36ee75ba2d4002507ceb9be8

  • SHA1

    c679478e7041b2c3f0659403e87dc1bf011e7f2c

  • SHA256

    85905bb938abe1ea461869f73103f364f2dddaae579f35d460338a21db8b8056

  • SHA512

    2fdd014e5c128e7bb6112cc3facf50dd413dbb7d9e705d7c3b21dd0a9d4717281d1bdb62bf416ed1e651bea8177db3d3ae0b3ac6ba729e0eb9010e694d8d7744

  • SSDEEP

    24576:U2G/nvxW3Ww0tQ++c2ARnuEWKoBc07UfctVGE9KnBvENv2ONSStxU:UbA30PiLKoJ5tsHnBMQgSStu

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NursultanLoader.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections