nanocore | b13d1e2a59eaac01b5581b4de553fb4cbd42f175f53be13823e5592366f7c6e7 | Triage

Sharing

General

Target

b13d1e2a59eaac01b5581b4de553fb4cbd42f175f53be13823e5592366f7c6e7
Size

167KB
Sample

221123-lpap5sfc8s
MD5

d2830d6eccd2e1d47495b26b0bc42ae3
SHA1

83ed43b872ff6261ee7df2e51f5bd6cf8d19ea9c
SHA256

b13d1e2a59eaac01b5581b4de553fb4cbd42f175f53be13823e5592366f7c6e7
SHA512

1ba9d7ece64fadc37ddc161d8bc33871e77868c739ed61e5a4d67912dcc7cfffa57a045f5b25ee6df372e874bba062058e0acb4d219a19259fdafad7e6463c04
SSDEEP

3072:T5Pto80z+vFMCnOzS9FL9sGR2uRyR7QPMtdViXi74WKS0TSUNumRwcQA:TM80mniiLU7QPerivWKSpUNumRwcH

Score

10^/10

nanocore evasion keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  b13d1e2a59eaac01b5581b4de553fb4cbd42f175f53be13823e5592366f7c6e7
- Size
  
  167KB
- MD5
  
  d2830d6eccd2e1d47495b26b0bc42ae3
- SHA1
  
  83ed43b872ff6261ee7df2e51f5bd6cf8d19ea9c
- SHA256
  
  b13d1e2a59eaac01b5581b4de553fb4cbd42f175f53be13823e5592366f7c6e7
- SHA512
  
  1ba9d7ece64fadc37ddc161d8bc33871e77868c739ed61e5a4d67912dcc7cfffa57a045f5b25ee6df372e874bba062058e0acb4d219a19259fdafad7e6463c04
- SSDEEP
  
  3072:T5Pto80z+vFMCnOzS9FL9sGR2uRyR7QPMtdViXi74WKS0TSUNumRwcQA:TM80mniiLU7QPerivWKSpUNumRwcH
Score

10^/10

nanocore evasion keylogger spyware stealer trojan
- NanoCore
  NanoCore is a remote access tool (RAT) with a variety of capabilities.
  keylogger trojan stealer spyware nanocore
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

nanocoreevasionkeyloggerspywarestealertrojan

behavioral2

nanocoreevasionkeyloggerspywarestealertrojan