Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Nursultan Alpha.exe

  • Size

    1.1MB

  • MD5

    eaab2cacd677d8a31e0ae69cbff23b8d

  • SHA1

    472b7996942010a2a949a9c50ad7eec336150fc6

  • SHA256

    14b6522d1b1d757b2b2bcaeb382913a2c922997bc48fa51ce51ab295775b4ec7

  • SHA512

    b07e97ff288c81a4dd61499091cdaeba7661ad54f6b8f92fa62715256a2277a686e179227175acf04d6e67b1138f6407f64af792ad90dda0103f0e6e5e116a7d

  • SSDEEP

    24576:U2G/nvxW3Ww0tB07zmgcewugqg8huYLINRr:UbA3027TuNV

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan Alpha.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections