nanocore | 7e37cd55264fa7ff3570d0c35ead3ded1d9f53408672ffc74fa05898955882df | Triage

Sharing

General

Target

7e37cd55264fa7ff3570d0c35ead3ded1d9f53408672ffc74fa05898955882df
Size

191KB
Sample

221123-lpcjqsfc8x
MD5

002852f0383cf0a97a3b174fbe7ecaee
SHA1

eccbeeed0d5b50991aa8113e7401fa1234a5f5b3
SHA256

7e37cd55264fa7ff3570d0c35ead3ded1d9f53408672ffc74fa05898955882df
SHA512

9855fd6a567cefd68d1c795217f3265861517fd54c920428fc2c260b97810395bda57d90ee2373d13931f1c512bec10b7e93f6cdde1f97d540deb3729729d7a0
SSDEEP

3072:H5Pto80z+vFMCnOzS9FL9sGR2uRyR7QPMtdVhdaPRHpevWkXyxgCvPUHOREoP:HM80mniiLU7QPerORHQW8yKCkHOREoP

Score

10^/10

nanocore evasion keylogger persistence spyware stealer trojan

Malware Config

Targets

- Target
  
  7e37cd55264fa7ff3570d0c35ead3ded1d9f53408672ffc74fa05898955882df
- Size
  
  191KB
- MD5
  
  002852f0383cf0a97a3b174fbe7ecaee
- SHA1
  
  eccbeeed0d5b50991aa8113e7401fa1234a5f5b3
- SHA256
  
  7e37cd55264fa7ff3570d0c35ead3ded1d9f53408672ffc74fa05898955882df
- SHA512
  
  9855fd6a567cefd68d1c795217f3265861517fd54c920428fc2c260b97810395bda57d90ee2373d13931f1c512bec10b7e93f6cdde1f97d540deb3729729d7a0
- SSDEEP
  
  3072:H5Pto80z+vFMCnOzS9FL9sGR2uRyR7QPMtdVhdaPRHpevWkXyxgCvPUHOREoP:HM80mniiLU7QPerORHQW8yKCkHOREoP
Score

10^/10

nanocore evasion keylogger persistence spyware stealer trojan
- NanoCore
  NanoCore is a remote access tool (RAT) with a variety of capabilities.
  keylogger trojan stealer spyware nanocore
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

nanocoreevasionkeyloggerpersistencespywarestealertrojan

behavioral2

nanocoreevasionkeyloggerpersistencespywarestealertrojan