General
-
Target
678825bf0eb64eafc816c34fc777f38c4d216a39e5e9cf11ce630bb7413aa4e7
-
Size
117KB
-
MD5
542d83d7fec2f39755d357b417367efb
-
SHA1
17568053c544c89c0cb4a2e45ffb7cb449d2ea2c
-
SHA256
678825bf0eb64eafc816c34fc777f38c4d216a39e5e9cf11ce630bb7413aa4e7
-
SHA512
817d7cb5a1c25060503690248cfc865ce9539e56384cd02ef083f1e58e1c0e1f229731e3109bd3546907c351295baa9de559d81426031103bafbccab24bad13a
-
SSDEEP
3072:sbpZKxysDiVsd8fHyXORSksrHyReACFWTl+N9b3Qh:sbpUyVszXOTsDyR4NZC
Score
10/10
Malware Config
Extracted
Family
nanocore
Attributes
-
activate_away_mode
false
- backup_connection_host
- backup_dns_server
-
buffer_size
0
-
build_time
0001-01-01T00:00:00Z
-
bypass_user_account_control
false
- bypass_user_account_control_data
-
clear_access_control
false
-
clear_zone_identifier
false
-
connect_delay
0
-
connection_port
0
- default_group
-
enable_debug_mode
false
-
gc_threshold
0
-
keep_alive_timeout
0
-
keyboard_logging
false
-
lan_timeout
0
-
max_packet_size
0
- mutex
-
mutex_timeout
0
-
prevent_system_sleep
false
- primary_connection_host
- primary_dns_server
-
request_elevation
false
-
restart_delay
0
-
run_delay
0
-
run_on_startup
false
-
set_critical_process
false
-
timeout_interval
0
-
use_custom_dns_server
false
- version
-
wan_timeout
0
Signatures
-
Nanocore family
Files
-
678825bf0eb64eafc816c34fc777f38c4d216a39e5e9cf11ce630bb7413aa4e7
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections