General
-
Target
f47f4f40886f05a734e2d6e584d6ab10.exe
-
Size
202KB
-
MD5
f47f4f40886f05a734e2d6e584d6ab10
-
SHA1
b2f9e9feeb10c857094003049e32b0aeb2e0ef9d
-
SHA256
9b144809ef27214ff63ef708350546d6aa01929f4bb8cfb12f3efc462b0b0cd1
-
SHA512
26f073459367829272ab0356475b9191b5e247c3ad66cf5c52465389eca662823c830717341fabfce8f199f6d0185c5e7118e0597b7b01f4057dfe520ac9e7df
-
SSDEEP
3072:QzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HIWb6d6+Il1c3rxbivlpfL:QLV6Bta6dtJmakIM5TXT6rxmv
Malware Config
Extracted
nanocore
1.2.2.0
katiebrady616.ddns.net:705
6614a0d3-74cf-4cba-9b22-46de5dee170d
-
activate_away_mode
true
-
backup_connection_host
katiebrady616.ddns.net
-
backup_dns_server
8.8.4.4
-
buffer_size
65535
-
build_time
2022-06-10T20:30:36.872525236Z
-
bypass_user_account_control
true
- bypass_user_account_control_data
-
clear_access_control
true
-
clear_zone_identifier
false
-
connect_delay
4000
-
connection_port
705
-
default_group
Default
-
enable_debug_mode
true
-
gc_threshold
1.048576e+07
-
keep_alive_timeout
30000
-
keyboard_logging
false
-
lan_timeout
2500
-
max_packet_size
1.048576e+07
-
mutex
6614a0d3-74cf-4cba-9b22-46de5dee170d
-
mutex_timeout
5000
-
prevent_system_sleep
false
-
primary_connection_host
katiebrady616.ddns.net
-
primary_dns_server
8.8.8.8
-
request_elevation
true
-
restart_delay
5000
-
run_delay
0
-
run_on_startup
false
-
set_critical_process
true
-
timeout_interval
5000
-
use_custom_dns_server
false
-
version
1.2.2.0
-
wan_timeout
8000
Signatures
-
Nanocore family
Files
-
f47f4f40886f05a734e2d6e584d6ab10.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections