General

  • Target

    Nursultan Alpha.exe

  • Size

    1.4MB

  • MD5

    783c0f752f2252cc44d0a276762806c2

  • SHA1

    8dd27a9511420e0706c9154c905ed1a8554f87a1

  • SHA256

    56fa8446933d5de458500c110f2c70b6e072a3010fb7afe948c6955be6c2f5b2

  • SHA512

    02307c263e5ccac880bb621a257fdf5836c4bbc4c86f5d0e787b7e8c0a1c79a98a21c820fbc30d310d0699f5175cfe96f2140fd6b6079b672547a3b1f33cdd41

  • SSDEEP

    24576:U2G/nvxW3Ww0trc08LZO8GaXDYmdMiAKPfxPChiMHCVN+vmMUdj:UbA30rcfO8GaX5HxeiMHWMUh

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan Alpha.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections