General

  • Target

    NursultanClient.exe

  • Size

    1.1MB

  • MD5

    81764a893234dd183185eb894c547a14

  • SHA1

    12cc7b4fd75bddaa99e98e87bbae70624e64407f

  • SHA256

    d7481cac8734f08d95bacc6aba8c846bc29edb591be84d85d2440a0f45dbba74

  • SHA512

    2b4c183378aa9c4bc38df76463ba76eebfeee32ccfe0642e87a28dd0eaa092de53b4ff1231414961510553ecc1ef7b3635507884ec249d566791886ff3fcc0a5

  • SSDEEP

    24576:U2G/nvxW3Ww0tQLbd7h6mxmtPKx6YBxAF6Ez0e:UbA30QLxwtjd

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NursultanClient.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections