General

  • Target

    Nurik Nextgen.zip

  • Size

    18.3MB

  • MD5

    3fc9a11e02cb42d213d905f1d8ad6fa0

  • SHA1

    209513a3c96a5afa02987a792ba23d61bcffcb75

  • SHA256

    5080fde04d9c1a84629ef9115de89032f4648865a763b759e03140c82e55ef03

  • SHA512

    0de34b6a34f4aadcddbb0bd37e337e21f3e641a70396491d430879a3192459b754a1d403417e8c5477d613afe0073440fe961d3f00e109075620895407902d86

  • SSDEEP

    393216:VbXvrdREZMNsYJFJxcTT45MczYrjpJViNyBBJNPrNf4H75o:FBREZMhd0T4dYHNHBB3PtW7a

Score
10/10

Malware Config

Signatures

  • DCRat payload 2 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • Nurik Nextgen.zip
    .zip
  • Nurik Nextgen/Loader.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections

  • Nurik Nextgen/Read Me.txt
  • Nurik Nextgen/Start.bat
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections

  • Nurik Nextgen/config.cson
  • Nurik Nextgen/data/7zxa.dll
    .dll windows:4 windows x86 arch:x86

    b56c6d8dc50f73376215a3b3ddce91c0


    Headers

    Imports

    Exports

    Sections

  • Nurik Nextgen/data/DCRAC.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Nurik Nextgen/data/DCRCC.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Nurik Nextgen/data/Default.SFX
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections

  • Nurik Nextgen/data/NCC2.dll
    .dll windows:5 windows x86 arch:x86

    f4d8783cad3f11045aa4e2ccd348ec7b


    Headers

    Imports

    Exports

    Sections

  • Nurik Nextgen/data/NCC3.dll
    .dll windows:5 windows x86 arch:x86

    7520e044195b1728541d87932e3d3d25


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Nurik Nextgen/data/NCCheck.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Nurik Nextgen/data/Rar.exe
    .exe windows:5 windows x86 arch:x86

    44d2677e8e5bfc0b36e493c644c96d3e


    Code Sign

    Headers

    Imports

    Sections

  • Nurik Nextgen/data/RarExt.dll
    .dll windows:5 windows x86 arch:x86

    0b0d2ebfb28acfbe9b3d782dfbd69718


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Nurik Nextgen/data/RarExt64.dll
    .dll windows:5 windows x64 arch:x64

    4757bf030e54b5b102bfa36ff111af95


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Nurik Nextgen/data/WinCon.SFX
    .exe windows:5 windows x86 arch:x86

    6be7eb2c55cb5cc119c0ff80a16fbc82


    Headers

    Imports

    Sections

  • Nurik Nextgen/data/Zip.SFX
    .exe windows:5 windows x86 arch:x86

    ae9f6a32bb8b03dce37903edbc855ba1


    Headers

    Imports

    Sections

  • Nurik Nextgen/data/dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Nurik Nextgen/data/dotNET_Reactor.Console.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Nurik Nextgen/data/dotNET_Reactor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Nurik Nextgen/data/enc.vbe
    .vbe .jse
  • Nurik Nextgen/data/kll.temp
  • Nurik Nextgen/data/upx.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Nurik Nextgen/data/wRar.exe
    .exe windows:5 windows x86 arch:x86

    76b13065110dab2258940c9960d7d4ce


    Code Sign

    Headers

    Imports

    Sections

  • Nurik Nextgen/lib/L1nc0In 1.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 10.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 11.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 12.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 13.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 14.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 2.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 3.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 4.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 5.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 6.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 7.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 8.jar
    .jar
  • Nurik Nextgen/lib/L1nc0In 9.jar
    .jar