General
-
Target
e90ddd47451d90bde72126bfca7a20c981eff714970beee230db665042fac9a0
-
Size
204KB
-
Sample
221128-xjvnxach3y
-
MD5
b4f745f595ba09be3d919913085f4cac
-
SHA1
d33a0db747f4aaced37fd7fcf5d0507d989fdd40
-
SHA256
e90ddd47451d90bde72126bfca7a20c981eff714970beee230db665042fac9a0
-
SHA512
f998d7d3fda4fc73a9f9c0ba89b74d4bef659c58e332de11b5972f5a10a8b9f479d3f5c04f8c6f2ffe8e6930dc5b871543f7d315942dc3a697385cb71f7f7863
-
SSDEEP
6144:LbpUyVszXOTsDyR4NZVqWAqU1362rstCTLN3jHG:LtsDO4UA4xKFAT5THG
Behavioral task
behavioral1
Sample
e90ddd47451d90bde72126bfca7a20c981eff714970beee230db665042fac9a0.exe
Resource
win7-20220812-en
Malware Config
Extracted
nanocore
1.2.1.1
t35tenj0yth1shba.chickenkiller.com:9003
73bd3f8d-8335-4b84-aa57-3dc225c2eca2
-
activate_away_mode
true
- backup_connection_host
- backup_dns_server
-
buffer_size
65535
-
build_time
2014-11-30T09:16:35.214443936Z
-
bypass_user_account_control
true
- bypass_user_account_control_data
-
clear_access_control
true
-
clear_zone_identifier
true
-
connect_delay
4000
-
connection_port
9003
-
default_group
Test
-
enable_debug_mode
true
-
gc_threshold
1.048576e+07
-
keep_alive_timeout
30000
-
keyboard_logging
true
-
lan_timeout
2500
-
max_packet_size
1.048576e+07
-
mutex
73bd3f8d-8335-4b84-aa57-3dc225c2eca2
-
mutex_timeout
5000
-
prevent_system_sleep
true
-
primary_connection_host
t35tenj0yth1shba.chickenkiller.com
- primary_dns_server
-
request_elevation
true
-
restart_delay
5000
-
run_delay
0
-
run_on_startup
true
-
set_critical_process
true
-
timeout_interval
5000
-
use_custom_dns_server
false
-
version
1.2.1.1
-
wan_timeout
8000
Targets
-
-
Target
e90ddd47451d90bde72126bfca7a20c981eff714970beee230db665042fac9a0
-
Size
204KB
-
MD5
b4f745f595ba09be3d919913085f4cac
-
SHA1
d33a0db747f4aaced37fd7fcf5d0507d989fdd40
-
SHA256
e90ddd47451d90bde72126bfca7a20c981eff714970beee230db665042fac9a0
-
SHA512
f998d7d3fda4fc73a9f9c0ba89b74d4bef659c58e332de11b5972f5a10a8b9f479d3f5c04f8c6f2ffe8e6930dc5b871543f7d315942dc3a697385cb71f7f7863
-
SSDEEP
6144:LbpUyVszXOTsDyR4NZVqWAqU1362rstCTLN3jHG:LtsDO4UA4xKFAT5THG
-