General
- Target Nursultan.exe
- Size 7.2MB
- Sample260708-tshh6act2l
- SHA256 ce9bdf1bf31b511230bcffbcb9ca8fcdba40a9cdbdaa3c59d1b580df883cb6a7
- MD5 d4c35f3dfae12ec27a8100e1d6a1ab0d
- SHA1 d91d3e44012e383ffecc5b88c14f20ee54f8ab7d
- SHA512 06dd9dd57687ac847c69ff5bbece8ac0bc75c1305627155a2c473a082e1f0219d80d5937c8a35d9eb29b75c35adffe3ccf2ab38857b043c6d4d8f96b9357de4f
- SSDEEP 196608:mbTiQK3w8BOsB4z/4tV+fRjPhrFMVllY4YIOFfj:cZK3PBpBGOEZjPlFKlYNIOFf
- TLSH T14C7633B1ACF7816BD9652630B34EA43268573F0F221815B9A09C0DF8E3B1D3DE35A4D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nursultan.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nursultan.exe
Resource
win11ltsc2024-20260706-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Nursultan.exe
- Size 7.2MB
- SHA256 ce9bdf1bf31b511230bcffbcb9ca8fcdba40a9cdbdaa3c59d1b580df883cb6a7
- MD5 d4c35f3dfae12ec27a8100e1d6a1ab0d
- SHA1 d91d3e44012e383ffecc5b88c14f20ee54f8ab7d
- SHA512 06dd9dd57687ac847c69ff5bbece8ac0bc75c1305627155a2c473a082e1f0219d80d5937c8a35d9eb29b75c35adffe3ccf2ab38857b043c6d4d8f96b9357de4f
- SSDEEP 196608:mbTiQK3w8BOsB4z/4tV+fRjPhrFMVllY4YIOFfj:cZK3PBpBGOEZjPlFKlYNIOFf
- TLSH T14C7633B1ACF7816BD9652630B34EA43268573F0F221815B9A09C0DF8E3B1D3DE35A4D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.