General
- Target Nurik.exe
- Size 901KB
- Sample260718-revv8agw3y
- SHA256 fd6ee47f3621d13a8509280f5367ef8189bd272fcb6c0f8c88cc5e52d69d82b3
- MD5 6b8ab6b29c9511d1da493b901f929647
- SHA1 132a5c521f3659245cc5710af03daf6850ed675f
- SHA512 e668d959b42696c62e26354d3c4b283dd368ae2a78a9fff39561278072615e53c8e4ee2e3f6b06ae70093a9b65dfc3cb436d01acdaecc6e51f75183dd5083a26
- SSDEEP 12288:GHKkNc4GkD9peeP9N8C0XZp4EZIQlaCrC2Vys8fM6kQUnfPf:wGkR0ePMxMMr0Y6kbnf
- TLSH T1EB15510E7E68D44BCC141FB7EDE07A39177885D4AB20C74B683109FCAB95BAA295713C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nurik.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nurik.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Nurik.exe
- Size 901KB
- SHA256 fd6ee47f3621d13a8509280f5367ef8189bd272fcb6c0f8c88cc5e52d69d82b3
- MD5 6b8ab6b29c9511d1da493b901f929647
- SHA1 132a5c521f3659245cc5710af03daf6850ed675f
- SHA512 e668d959b42696c62e26354d3c4b283dd368ae2a78a9fff39561278072615e53c8e4ee2e3f6b06ae70093a9b65dfc3cb436d01acdaecc6e51f75183dd5083a26
- SSDEEP 12288:GHKkNc4GkD9peeP9N8C0XZp4EZIQlaCrC2Vys8fM6kQUnfPf:wGkR0ePMxMMr0Y6kbnf
- TLSH T1EB15510E7E68D44BCC141FB7EDE07A39177885D4AB20C74B683109FCAB95BAA295713C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.