General
- Target XUY.exe
- Size 869KB
- Sample220524-prq2padher
- SHA256 dc5a63b06f0be5f96267b2ebfe28a4e7644de021cce402dd666f7454233bd96b
Score
10/10
Malware Config
Targets
-
- Target XUY.exe
- Size 869KB
- SHA256 dc5a63b06f0be5f96267b2ebfe28a4e7644de021cce402dd666f7454233bd96b
Score10/10-
NanoCore
NanoCore is a remote access tool (RAT) with a variety of capabilities.
-
suricata: ET MALWARE Possible NanoCore C2 60B
suricata: ET MALWARE Possible NanoCore C2 60B
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Suspicious use of SetThreadContext