nerbian | 902c65435b6b44cfda1156b0e7c6a30b2785fa4f2cbb9b1944a66f5146ec7aa5 | Triage

Resubmissions

02-06-2022 17:36

220602-v6vw3scfan 10

02-06-2022 17:00

220602-vjftmscedj 10

02-06-2022 16:31

220602-t1eggacdfk 10

02-06-2022 16:27

220602-tx551sggh3 10

28-04-2022 15:09

220428-sjmk3sdehp 8

Sharing

General

Target

MoUsoCore.exe
Size

5.6MB
Sample

220602-v6vw3scfan
MD5

5d5bc970f975341558b8d2c225ca0115
SHA1

4f74826ed56cda233cfc12b86fd1b7da4a9f2e56
SHA256

902c65435b6b44cfda1156b0e7c6a30b2785fa4f2cbb9b1944a66f5146ec7aa5
SHA512

c7127326914dc4b793715a16e8d952ba38e87091d4be505c6bf45b4f4e918b82aa2b570554b79e69d4fe6352767deb411c132a5ac98db52026f98ef0652d9449

Score

10^/10

nerbian android linux macos rat trojan upx

Malware Config

Targets

- Target
  
  MoUsoCore.exe
- Size
  
  5.6MB
- MD5
  
  5d5bc970f975341558b8d2c225ca0115
- SHA1
  
  4f74826ed56cda233cfc12b86fd1b7da4a9f2e56
- SHA256
  
  902c65435b6b44cfda1156b0e7c6a30b2785fa4f2cbb9b1944a66f5146ec7aa5
- SHA512
  
  c7127326914dc4b793715a16e8d952ba38e87091d4be505c6bf45b4f4e918b82aa2b570554b79e69d4fe6352767deb411c132a5ac98db52026f98ef0652d9449
Score

10^/10

nerbian rat trojan upx
- Detect Nerbian RAT malware
- Nerbian
  Remote access trojan written in the Golang.
  rat trojan nerbian
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9 behavioral10 behavioral11 behavioral12

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

nerbianrattrojanupx

behavioral2

nerbianrattrojanupx

behavioral3

nerbianrattrojanupx

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12