General

  • Target

    Nursultan_FREE_2024.zip

  • Size

    181.9MB

  • MD5

    7d2b9b9d96904a1f8e1f697d1fd89011

  • SHA1

    94478e88b5ea244bfb51dfe6152d70d75d24b315

  • SHA256

    bab8b5e74ab7210b030316dd5685f3fdcceac35bd3b3a90e5dd01592f8abb630

  • SHA512

    c365dd69778196b9e3ee300d0aa1ee25b969d77406947454e11f6270d8464d5c7b87bef7b959fbbb72a3a4335b05c9d8d18a0a25820793e0d8dcf5b701b86999

  • SSDEEP

    3145728:t+w3E+1VwaW7Fio95ER6bpdVhje9dhZMKHhh+jV3n5iyWKcLMlESZ8iX/0x:P0+HwaWOR63VhjePhZlT+pnPWKqMlNZK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan_FREE_2024.zip
    .zip
  • NursultanNextgen2024/OpenAL.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NursultanNextgen2024/SAPIWrapper_x64.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • NursultanNextgen2024/assets.rar
    .rar
  • 04/04933f2f39e339e7ba0db0c21812cb9ff9bdce8c
  • 04/049a3049a5ac8631a6c5f367b7d824fc0d8de39b
  • 04/04c43a7a9b7883538080f84bf5b4bcba0c8b9f8a
  • 04/04d00bc852751498fad759fe473fef917b51c55d
  • 04/04d181f5f4d61d2215175a1e63e7caaf9b624ab2
  • 04/04de7b3f382c41f8bfa36ea205f3ae807457ff7f
  • 04/04f5636909319c54405c20ff932d92397523aa7a
  • 04/3d0cb49d33b9bb2462ad183f65e2e11aea3c1eff — копия (3)
  • 04/3d0cb49d33b9bb2462ad183f65e2e11aea3c1eff — копия (3) — копия
  • 04/3d0cb49d33b9bb2462ad183f65e2e11aea3c1eff — копия (4)
  • 04/3d0cb49d33b9bb2462ad183f65e2e11aea3c1eff — копия (4) — копия
  • 04/3d0cb49d33b9bb2462ad183f65e2e11aea3c1eff — копия (5)
  • 04/3d0cb49d33b9bb2462ad183f65e2e11aea3c1eff — копия (5) — копия
  • 04/3d0cb49d33b9bb2462ad183f65e2e11aea3c1eff — копия (6) — копия
  • 04/3d0cb49d33b9bb2462ad183f65e2e11aea3c1eff — копия (7) — копия
  • 04/3d0cb49d33b9bb2462ad183f65e2e11aea3c1eff — копия (8) — копия
  • 04/3d95ea49e91b4295859b193bb41b009b92250a44
  • 04/3d95ea49e91b4295859b193bb41b009b92250a44 — копия
  • 04/3d95ea49e91b4295859b193bb41b009b92250a44 — копия (2)
  • 3e/3e27366669cc1ddd9a5a51925997725e5f3f4e30
  • 3e/3e71405cad8d5e0e83a44e61051e89c0c74910ed
  • 3e/3ea516355b5ec2bef08d9e6aa3ebc6626acb583b
  • 3e/3eb8034123b85bafb06708740611791839e44355
  • 3e/3ec63275fffdf755e78cc01fa22d050830034fb8
  • 3e/3ed37a12eecbbe4426a596529c7eead9b21881f5
  • 3e/3eddefcae7dd754b80765c2fee955aa26c644e7c
  • 3e/3f01b991bdb4b672fd661b87256999e79fb2aee8
  • 3e/3f01b991bdb4b672fd661b87256999e79fb2aee8 — копия
  • 3e/3f2e554955be100d7f28c074586b764710330b8c
  • 3e/3f2e8691d05ab35ba956159e76ad89b267bb9a9f
  • 3e/3f2e8691d05ab35ba956159e76ad89b267bb9a9f — копия
  • 3e/3f4a8422530fa716bd759ab52fbea57345605687
  • 3e/3f8b9415f67443206f6af52c1471d0de0354d046 — копия
  • 3f/3f01b991bdb4b672fd661b87256999e79fb2aee8
  • 3f/3f2e554955be100d7f28c074586b764710330b8c
  • 3f/3f2e8691d05ab35ba956159e76ad89b267bb9a9f
  • 3f/3f4a8422530fa716bd759ab52fbea57345605687
  • 3f/3f8b9415f67443206f6af52c1471d0de0354d046
  • NursultanNextgen2024/jemalloc.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • NursultanNextgen2024/lwjgl.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NursultanNextgen2024/lwjgl_opengl.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • NursultanNextgen2024/lwjgl_stb.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • NursultanNextgen2024/minecraft.jar
    .jar
  • NursultanNextgen2024/natives.rar
    .rar
  • natives/Nursultan.dll
    .dll windows:6 windows x64 arch:x64

    fd120ede81f6e0fb054691e0fd54f77a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • natives/OpenAL.dll
    .dll windows:6 windows x64 arch:x64

    d7511036a8ab3c1f6367c84b66c75df4


    Headers

    Imports

    Exports

    Sections

  • natives/SAPIWrapper_x64.dll
    .dll windows:6 windows x64 arch:x64

    6159d78f91fdaebe8b20aac0d9eaf0d0


    Headers

    Imports

    Exports

    Sections

  • natives/glfw.dll
    .dll windows:6 windows x64 arch:x64

    58606f4b6ebb14019ff3ec989565a852


    Headers

    Imports

    Exports

    Sections

  • natives/jemalloc.dll
    .dll windows:6 windows x64 arch:x64

    4cebee0c2e86a2cfd8bec589b63f27eb


    Headers

    Imports

    Exports

    Sections

  • natives/lwjgl.dll
    .dll windows:6 windows x64 arch:x64

    80e5064fe27ad168f104ade5d32c625a


    Headers

    Imports

    Exports

    Sections

  • natives/lwjgl_opengl.dll
    .dll windows:6 windows x64 arch:x64

    b508098507058cf77c5e15413d8de916


    Headers

    Imports

    Exports

    Sections

  • natives/lwjgl_stb.dll
    .dll windows:6 windows x64 arch:x64

    1498494ca423cc0c42a7ee3271ecb913


    Headers

    Imports

    Exports

    Sections

  • natives/lwjgl_tinyfd.dll
    .dll windows:6 windows x64 arch:x64

    dfb73bbe8436060ace467b0b58794e1d


    Headers

    Imports

    Exports

    Sections

  • NursultanNextgen2024/rar/UnRAR.exe
    .exe windows:5 windows x64 arch:x64

    7d1e440af537908e3c09fa351258d1f6


    Code Sign

    Headers

    Imports

    Sections

  • NursultanNextgen2024/start.bat