General

  • Target

    Nursultan-Alpha-main (VIRUS!!!).zip

  • Size

    574KB

  • MD5

    5730865526c9050b088d564c1506fbd8

  • SHA1

    58b5fc5577e2d125445c67c271a0757d5f8fb582

  • SHA256

    714c3946e5b2691b37a20d47af5323e96e6d1ecc9976f9df841f1d5674d44b03

  • SHA512

    c6cc6d6f8db96b43792c2d8afb0df39b77793f01e91bdafb11f75f587b9d3bd0e9f20039581e6f690a341cfc2618adce7e11641525b3d2c064cc5b95936a4889

  • SSDEEP

    12288:OrCk/O342/nVHpC6ZoQ193+YivgGkmDQn0hwoVMV+5r:OzA4OJfoQytEn0W6Mc5r

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan-Alpha-main (VIRUS!!!).zip
    .zip
  • Nursultan-Alpha-main/NursultanAlpha.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections

  • Nursultan-Alpha-main/README.md