General
- Target Nursultan.exe
- Size 12.3MB
- Sample260804-nd61baydqa
- SHA256 bea9831956dbce3124b718783509470ea6d0f67e1cfe2c326128a384ad830827
- MD5 52e511c63a294c231d11bb9bdd71b461
- SHA1 e5e192bd3100fb58be51659e5b1b25618959cf6b
- SHA512 0e2689d38d804a7c9cca6584e9ff32a0a23e5b4d229a11520efd68b3d88f81d8f0b0d178f82dda3faa61f44e0681ce9003c402c0c6de899fff26e0e8b3751d52
- SSDEEP 196608:KupQ2aLpvuiI5UX49jSnF/8oLHlvqEjCgdcArX3gXw8chAagCb1wBNDLcnLgrBM:KKaFvN74hqFkojMIColXKchAa2N+iM
- TLSH T15FD6128525D0D6FCC48187F8E24615FAF0D77C8899FDD41BEF87A422FA31928C8E5626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nursultan.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nursultan.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target Nursultan.exe
- Size 12.3MB
- SHA256 bea9831956dbce3124b718783509470ea6d0f67e1cfe2c326128a384ad830827
- MD5 52e511c63a294c231d11bb9bdd71b461
- SHA1 e5e192bd3100fb58be51659e5b1b25618959cf6b
- SHA512 0e2689d38d804a7c9cca6584e9ff32a0a23e5b4d229a11520efd68b3d88f81d8f0b0d178f82dda3faa61f44e0681ce9003c402c0c6de899fff26e0e8b3751d52
- SSDEEP 196608:KupQ2aLpvuiI5UX49jSnF/8oLHlvqEjCgdcArX3gXw8chAagCb1wBNDLcnLgrBM:KKaFvN74hqFkojMIColXKchAa2N+iM
- TLSH T15FD6128525D0D6FCC48187F8E24615FAF0D77C8899FDD41BEF87A422FA31928C8E5626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger