Overview

overview

7

Static

static

1

Nursultan.exe

windows7-x64

5

Nursultan.exe

windows10-2004-x64

7

Resubmissions

08/01/2025, 14:54

250108-r94rlstpet7

08/01/2025, 14:07

250108-re1fpsvpfl8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Nursultan.exe
  • Size 16.1MB
  • Sample250108-r94rlstpet
  • SHA256 f8fba45ce7e00b527540f96707338b7adc8ee5ccc23924145a155fdd87d4ce2f
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Targets

    • Target
      Nursultan.exe
    • Size 16.1MB
    • SHA256 f8fba45ce7e00b527540f96707338b7adc8ee5ccc23924145a155fdd87d4ce2f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks