Nursultan (2)[.]rar

General

Target
Nursultan (2).rar
Size 315KB
Sample260626-17e5xae18t
SHA256 02a5e0feb78b737d008d91f4183fddc728d44681a949c128ba61a3ca7c804dd1
MD5 c06786e8216ae33a1b383fdb6abee006
SHA1 50cff64e4cbb1c256eaf6ddcaab37f415eb4be1b
SHA512 f91e0580adc8ae4faa954350c31358d4a92c01935c0260b03648843709bd7df72b6e6aca3be11cf6ae7a0382072b410cca502b539833a221ff00c1debde3127a
SSDEEP 6144:Wj7EMjTbb5qJnqN9xoIJXeIZ9k41zs/2SfwxSqMofMlDSjYpODGWTmxnUXI2SLqq:UQQEnekIZiSs/bwUqnfMjO662nLL7
TLSH
T19364230BB3D57304626B293859F6DA7368A08B70D3B41E41C161F75838F4533AA9BDBA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Nursultan.exe.exe

File Explorer

Nursultan (2).rar

.rar 315KB
Nursultan.exe.exe

.exe 625KB

Nursultan (2).rar

SHA256 02a5e0feb78b737d008d91f4183fddc728d44681a949c128ba61a3ca7c804dd1
MD5 c06786e8216ae33a1b383fdb6abee006
SHA1 50cff64e4cbb1c256eaf6ddcaab37f415eb4be1b
SHA512 f91e0580adc8ae4faa954350c31358d4a92c01935c0260b03648843709bd7df72b6e6aca3be11cf6ae7a0382072b410cca502b539833a221ff00c1debde3127a
SSDEEP 6144:Wj7EMjTbb5qJnqN9xoIJXeIZ9k41zs/2SfwxSqMofMlDSjYpODGWTmxnUXI2SLqq:UQQEnekIZiSs/bwUqnfMjO662nLL7
TLSH
T19364230BB3D57304626B293859F6DA7368A08B70D3B41E41C161F75838F4533AA9BDBA
MD5 SHA1 SHA512 SSDEEP TLSH

Password

1234

Nursultan.exe.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 268f999e217077dafeb9ca862cbfc9aa94d2bd86888b6ea8fbc8d482b74f0936
MD5 4b4f2dd7e161d711bb515ba020b8772e
SHA1 4e2c37577a8536c8e8b45015a9dfbbd7535a3dfa
SHA512 6b22761ec1faaa83c4467b97ffb7708a4c0235ee135e64cc9ac56eef141836e7204f1323ad43c1ac32b2b76b8240d7addd824b1ee1ae3ebee9bd67c3391f0e97
SSDEEP 6144:v1+KqIt3l9X8Kwy5KsBB+Ut1cGbYK3Jxvvj4wjuR8oc0jIVxeIIgwZLrNHyL8UoM:Nbp8iBQu18K3swe3Zy8j72UjvRLTy4v
TLSH
T1C4D4D4143B95CAC8D48017FE455A1A09DB9B99F125F2E303370AFA61CD458DEDE2C3EA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

1234

Minor OS version

0

Major OS version

4

Entry point

535518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Nursultan (2).rar

Nursultan.exe.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Nursultan (2).rar

Nursultan.exe.exe

mscoree

dotnet