nanocore | hxxp://gwcrresearch[.]org/js/DOC_00000231320-2021-10-09349[.]rar | Triage

Submit
Reports

Overview

overview

Static

static

URLScan

urlscan

http://gwcrresearch....

windows10_x64

Sharing

General

Target

http://gwcrresearch.org/js/DOC_00000231320-2021-10-09349.rar
Sample

211011-lcr4nagfh4

Score

10^/10

nanocore evasion keylogger spyware stealer trojan

Static task

static1

URLScan task

urlscan1

Sample

http://gwcrresearch.org/js/DOC_00000231320-2021-10-09349.rar

Behavioral task

behavioral1

Sample

http://gwcrresearch.org/js/DOC_00000231320-2021-10-09349.rar

Resource

win10-en-20210920

nanocore evasion keylogger spyware stealer trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  http://gwcrresearch.org/js/DOC_00000231320-2021-10-09349.rar
Score

10^/10

nanocore evasion keylogger spyware stealer trojan
- NanoCore
  NanoCore is a remote access tool (RAT) with a variety of capabilities.
  keylogger trojan stealer spyware nanocore
- Executes dropped EXE
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

nanocoreevasionkeyloggerspywarestealertrojan

© 2018-2024

Terms | Privacy