Overview

overview

10

Static

static

10

NursultanAlpha.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NursultanAlpha.exe

  • Size

    75KB

  • MD5

    2ddd08162c20e92a6d4b3703e06ba3c9

  • SHA1

    3c6bae2a365046055a059f8093e97d9354eb760c

  • SHA256

    8482c4662f7a0eb238bc77da5797d584e5d70a7329d46e933d43419ffa543d14

  • SHA512

    6b43c427612e02cffedad02cd790fff23d53e59fdc7f1f14c60bad5dca4a85f5a53987530aae07cf7b477e544b84f45864353932d72fa90b9469c4895b081257

  • SSDEEP

    1536:fNjt+7kgroBkEsFfxROKsMpwbP/A/NRUGu6NOHBKz1EuH:9M7kHdsFfDOKfebP/Ak6OAz1/H

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

mature-pressing.gl.at.ply.gg:38503

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NursultanAlpha.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections