General

  • Target

    Nursultan.exe

  • Size

    1.7MB

  • MD5

    167a7a1acbb331c7120f7c523b77b63a

  • SHA1

    e4ab977acdb17dbbf2caa51a75d7fb67c4dc433b

  • SHA256

    cf1f6eb66912ff5ad30f8940accdb1df9bb2f8f8cdf3f8d45a4febd48c5641b9

  • SHA512

    2145a9c4414e814e2d6d88c403e0ade70eef266b1307f8c2cdc3822a7829e5e2273932f128981c96cfede5d719b5e9a0654c4fb395f19e74dd2bb020cf501a3f

  • SSDEEP

    24576:P2G/nvxW3WayX0tmpK3Xgjh1gMTVn/8E6Oqi4yEBCknTXCZ/UzGGq1lM/XP2YFn+:PbA37ykwpKM+sHWyGXvAIbFCZ2XC1f

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections