nanocore | 271c92d4124758b378e5f0b5f3d8e96ef2f517f9b732d0a35b1113227bccf135 | Triage

Sharing

General

Target

271c92d4124758b378e5f0b5f3d8e96ef2f517f9b732d0a35b1113227bccf135
Size

158KB
Sample

221123-lpdrssfc81
MD5

202e3ede5006aaa516cef6af81002da6
SHA1

fd77cd81afef5985ab5902f507d95de8edf0161b
SHA256

271c92d4124758b378e5f0b5f3d8e96ef2f517f9b732d0a35b1113227bccf135
SHA512

0b717b8c49451de34f28d7a94e7d2d1bba80f9f605497143e91feca64c5d8facf47185416f50cc4a7846fc25ab882bf3a74ef959361c68c50c657a6ddf761db8
SSDEEP

3072:i5Pto80z+vFMCnOzS9FL9sGR2uRyR7QPMtdVvuDZmXUv/KEs4aYRqfEh:iM80mniiLU7QPervuDZ3vyeRq4

Score

10^/10

nanocore evasion keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  271c92d4124758b378e5f0b5f3d8e96ef2f517f9b732d0a35b1113227bccf135
- Size
  
  158KB
- MD5
  
  202e3ede5006aaa516cef6af81002da6
- SHA1
  
  fd77cd81afef5985ab5902f507d95de8edf0161b
- SHA256
  
  271c92d4124758b378e5f0b5f3d8e96ef2f517f9b732d0a35b1113227bccf135
- SHA512
  
  0b717b8c49451de34f28d7a94e7d2d1bba80f9f605497143e91feca64c5d8facf47185416f50cc4a7846fc25ab882bf3a74ef959361c68c50c657a6ddf761db8
- SSDEEP
  
  3072:i5Pto80z+vFMCnOzS9FL9sGR2uRyR7QPMtdVvuDZmXUv/KEs4aYRqfEh:iM80mniiLU7QPervuDZ3vyeRq4
Score

10^/10

nanocore evasion keylogger spyware stealer trojan
- NanoCore
  NanoCore is a remote access tool (RAT) with a variety of capabilities.
  keylogger trojan stealer spyware nanocore
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

nanocoreevasionkeyloggerspywarestealertrojan

behavioral2

nanocoreevasionkeyloggerspywarestealertrojan