General

  • Target

    NursultanNextgen.rar

  • Size

    219.8MB

  • MD5

    174925a3d182f344f3276a170e1feb3e

  • SHA1

    aa956e608e782cfccf5dad025fd4cf4c766f7895

  • SHA256

    0fbbb55ab04f289c500724de2932d1ff430c953dc172a1ae1f129e5317fbdd57

  • SHA512

    d846d6e88deb63a8d237d4b1ad04e99a0da4d33a6b6e2ef06002d18fc973832bf98295491f0eb3f8e19a780d8cbc3c8fa951d3a3da5e07c40e3d2f81058b3ff5

  • SSDEEP

    6291456:Y+bJQA/EEVsUecY6ZiFKUYgdXXtMPDTGGY5xLxv5F:Y++nEVKbKAdXdqTXexLFH

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • NursultanNextgen.rar
    .rar

    Password: 2024

  • NursultanNextgen/Nursultan.exe
    .exe windows:5 windows x64 arch:x64

    Password: 2024

    f4f2e2b03fe5666a721620fcea3aea9b


    Headers

    Imports

    Sections

  • Stub.pyc
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-1.-1.bcr
    .gz

    Password: 2024

  • r.-1.-1.bcr
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-1.-2.bcr
    .gz

    Password: 2024

  • r.-1.-2.bcr
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-1.0.bcr
    .gz

    Password: 2024

  • r.-1.0.bcr
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-2.-1.bcr
    .gz

    Password: 2024

  • r.-2.-1.bcr
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-2.-2.bcr
    .gz

    Password: 2024

  • r.-2.-2.bcr
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-2.-6.bcr
    .gz

    Password: 2024

  • r.-2.-6.bcr
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-2.-7.bcr
    .gz

    Password: 2024

  • r.-2.-7.bcr
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-2.0.bcr
    .gz
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-3.-1.bcr
    .gz
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-3.-2.bcr
    .gz
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-4.-1.bcr
    .gz
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-4.-2.bcr
    .gz
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-5.-1.bcr
    .gz
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.-5.-2.bcr
    .gz
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.0.-1.bcr
    .gz
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.0.-2.bcr
    .gz
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.0.0.bcr
    .gz
  • NursultanNextgen/baritone/91.186.198.114_25565/cache/r.1.-1.bcr
    .gz
  • NursultanNextgen/baritone/readme.txt
  • NursultanNextgen/configs/custom/5opka.json
  • NursultanNextgen/configs/custom/fix.vbs
  • NursultanNextgen/configs/custom/imba.json
  • NursultanNextgen/configs/custom/popka4.json
  • NursultanNextgen/configs/custom/rw.json
  • NursultanNextgen/configs/default.json
  • NursultanNextgen/configs/temp/Accounts.json
  • NursultanNextgen/configs/temp/AutoBuy.json
  • NursultanNextgen/configs/temp/BlockedPlayers.json
  • NursultanNextgen/configs/temp/ChestStealer.json
  • NursultanNextgen/configs/temp/Client.json
  • NursultanNextgen/configs/temp/CustomStaffs.json
  • NursultanNextgen/configs/temp/Draggables.json
  • NursultanNextgen/configs/temp/Friends.json
  • NursultanNextgen/configs/temp/Macroses.json
  • NursultanNextgen/configs/temp/Waypoints.json
  • NursultanNextgen/fix.bat
  • NursultanNextgen/lib/authlib-4.0.42.0.jar
    .jar
  • NursultanNextgen/lib/brigadier-1.0.17.jar
    .jar
  • NursultanNextgen/lib/ca-fixer-1.0.jar
    .jar
  • NursultanNextgen/lib/commons-codec-1.10.jar
    .jar
  • NursultanNextgen/lib/commons-compress-1.8.1.jar
    .jar
  • NursultanNextgen/lib/commons-io-2.5.jar
    .jar
  • NursultanNextgen/lib/commons-lang3-3.5.jar
    .jar
  • NursultanNextgen/lib/commons-logging-1.1.3.jar
    .jar
  • NursultanNextgen/lib/datafixerupper-4.0.26.jar
    .jar
  • NursultanNextgen/lib/discord-rpc.jar
    .jar
  • NursultanNextgen/lib/discord.jar
    .zip
  • NursultanNextgen/lib/fastutil-8.2.1.jar
    .jar
  • NursultanNextgen/lib/gson-2.10.1.jar
    .jar
  • NursultanNextgen/lib/guava-21.0.jar
    .jar
  • NursultanNextgen/lib/httpclient-4.3.3.jar
    .jar
  • NursultanNextgen/lib/httpcore-4.3.2.jar
    .jar
  • NursultanNextgen/lib/icu4j-66.1.jar
    .jar
  • NursultanNextgen/lib/javabridge-1.0.22.jar
    .jar
  • NursultanNextgen/lib/javafaker-1.0.2.jar
    .jar
  • NursultanNextgen/lib/jinput-2.0.5.jar
    .jar
  • NursultanNextgen/lib/jna-4.4.0.jar
    .jar
  • NursultanNextgen/lib/jopt-simple-5.0.3.jar
    .jar
  • NursultanNextgen/lib/json-20231013.jar
    .jar
  • NursultanNextgen/lib/jsr305-3.0.2.jar
    .jar
  • NursultanNextgen/lib/jutils-1.0.0.jar
    .jar
  • NursultanNextgen/lib/log4j-api-2.8.1.jar
    .jar
  • NursultanNextgen/lib/log4j-core-2.8.1.jar
    .jar
  • NursultanNextgen/lib/lwjgl-3.2.2.jar
    .jar
  • NursultanNextgen/lib/lwjgl-glfw-3.2.2.jar
    .jar
  • NursultanNextgen/lib/lwjgl-jemalloc-3.2.2.jar
    .jar
  • NursultanNextgen/lib/lwjgl-openal-3.2.2.jar
    .jar
  • NursultanNextgen/lib/lwjgl-opengl-3.2.2.jar
    .jar
  • NursultanNextgen/lib/lwjgl-stb-3.2.2.jar
    .jar
  • NursultanNextgen/lib/lwjgl-tinyfd-3.2.2.jar
    .jar
  • NursultanNextgen/lib/netty-all-4.1.25.Final.jar
    .jar
  • NursultanNextgen/lib/oshi-core-1.1.jar
    .jar
  • NursultanNextgen/lib/patchy-1.3.9.jar
    .jar
  • NursultanNextgen/lib/platform-3.4.0.jar
    .jar
  • NursultanNextgen/lib/slf4j-api-2.0.7.jar
    .jar
  • NursultanNextgen/lib/snakeyaml-2.0.jar
    .jar
  • NursultanNextgen/lib/text2speech-1.11.3.jar
    .jar
  • NursultanNextgen/lib/user_info.jar
    .zip
  • NursultanNextgen/lib/viabackwards-4.7.1-SNAPSHOT.jar
    .jar
  • NursultanNextgen/lib/viaversion-4.7.1-SNAPSHOT.jar
    .jar
  • NursultanNextgen/natives/Nursultan.dll
    .dll windows:6 windows x64 arch:x64

    fd120ede81f6e0fb054691e0fd54f77a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NursultanNextgen/natives/OpenAL.dll
    .dll windows:6 windows x64 arch:x64

    d7511036a8ab3c1f6367c84b66c75df4


    Headers

    Imports

    Exports

    Sections

  • NursultanNextgen/natives/SAPIWrapper_x64.dll
    .dll windows:6 windows x64 arch:x64

    6159d78f91fdaebe8b20aac0d9eaf0d0


    Headers

    Imports

    Exports

    Sections

  • NursultanNextgen/natives/glfw.dll
    .dll windows:6 windows x64 arch:x64

    58606f4b6ebb14019ff3ec989565a852


    Headers

    Imports

    Exports

    Sections

  • NursultanNextgen/natives/jemalloc.dll
    .dll windows:6 windows x64 arch:x64

    4cebee0c2e86a2cfd8bec589b63f27eb


    Headers

    Imports

    Exports

    Sections

  • NursultanNextgen/natives/lwjgl.dll
    .dll windows:6 windows x64 arch:x64

    80e5064fe27ad168f104ade5d32c625a


    Headers

    Imports

    Exports

    Sections

  • NursultanNextgen/natives/lwjgl_opengl.dll
    .dll windows:6 windows x64 arch:x64

    b508098507058cf77c5e15413d8de916


    Headers

    Imports

    Exports

    Sections

  • NursultanNextgen/natives/lwjgl_stb.dll
    .dll windows:6 windows x64 arch:x64

    1498494ca423cc0c42a7ee3271ecb913


    Headers

    Imports

    Exports

    Sections

  • NursultanNextgen/natives/lwjgl_tinyfd.dll
    .dll windows:6 windows x64 arch:x64

    dfb73bbe8436060ace467b0b58794e1d


    Headers

    Imports

    Exports

    Sections

  • NursultanNextgen/nursultanclient.jar
    .jar
  • NursultanNextgen/Инструкция(обьезательно).txt