nanocore | 4bd48e9115459a450e75aff1dcd1d6cd8c17e54ed574351398fb2ec59a1a3a02 | Triage

Sharing

General

Target

4bd48e9115459a450e75aff1dcd1d6cd8c17e54ed574351398fb2ec59a1a3a02
Size

237KB
Sample

221123-vtp53aaa33
MD5

3dc1a9b60081471b4b0417822c9c8b4e
SHA1

6fc791b3d0227028448444a37890b3bf219e390b
SHA256

4bd48e9115459a450e75aff1dcd1d6cd8c17e54ed574351398fb2ec59a1a3a02
SHA512

589ffc82e867597beb06881a24b7690d79e9712a775c08303b487eca5943d653cb0a7fd3aa874b273c78fcb82009753cd7bb75d4af1749440398419ded2dc531
SSDEEP

6144:vrzymEatwSWNGhZ1Dxh+t4qbt0qyK3M8:ea+5NGoGeL73M

Score

10^/10

nanocore evasion keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  4bd48e9115459a450e75aff1dcd1d6cd8c17e54ed574351398fb2ec59a1a3a02
- Size
  
  237KB
- MD5
  
  3dc1a9b60081471b4b0417822c9c8b4e
- SHA1
  
  6fc791b3d0227028448444a37890b3bf219e390b
- SHA256
  
  4bd48e9115459a450e75aff1dcd1d6cd8c17e54ed574351398fb2ec59a1a3a02
- SHA512
  
  589ffc82e867597beb06881a24b7690d79e9712a775c08303b487eca5943d653cb0a7fd3aa874b273c78fcb82009753cd7bb75d4af1749440398419ded2dc531
- SSDEEP
  
  6144:vrzymEatwSWNGhZ1Dxh+t4qbt0qyK3M8:ea+5NGoGeL73M
Score

10^/10

nanocore evasion keylogger spyware stealer trojan
- NanoCore
  NanoCore is a remote access tool (RAT) with a variety of capabilities.
  keylogger trojan stealer spyware nanocore
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

nanocoreevasionkeyloggerspywarestealertrojan

behavioral2

nanocoreevasionkeyloggerspywarestealertrojan