Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 11:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nursultan.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nursultan.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target Nursultan.exe
- Size 12.3MB
- Sample260804-nd61baydqa
- SHA256 bea9831956dbce3124b718783509470ea6d0f67e1cfe2c326128a384ad830827
- MD5 52e511c63a294c231d11bb9bdd71b461
- SHA1 e5e192bd3100fb58be51659e5b1b25618959cf6b
- SHA512 0e2689d38d804a7c9cca6584e9ff32a0a23e5b4d229a11520efd68b3d88f81d8f0b0d178f82dda3faa61f44e0681ce9003c402c0c6de899fff26e0e8b3751d52
- SSDEEP 196608:KupQ2aLpvuiI5UX49jSnF/8oLHlvqEjCgdcArX3gXw8chAagCb1wBNDLcnLgrBM:KKaFvN74hqFkojMIColXKchAa2N+iM
- TLSH T15FD6128525D0D6FCC48187F8E24615FAF0D77C8899FDD41BEF87A422FA31928C8E5626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 1220 Nursultan.exe 1220 Nursultan.exe