ceb348dfa61b34bebce021fa783b0afdb874ea7205f75e7fb42b01898439be75

Submit
Reports

Overview

overview

Static

static

NanoCore_1...22.rar

windows10-2004-x64

NanoCore 1...in.xml

windows10-2004-x64

NanoCore 1...sqlite

windows10-2004-x64

NanoCore 1...sqlite

windows10-2004-x64

NanoCore 1...sqlite

windows10-2004-x64

NanoCore 1...IO.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...ls.ncp

windows10-2004-x64

NanoCore 1...ck.ncp

windows10-2004-x64

NanoCore 1...ss.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...ra.wav

windows10-2004-x64

NanoCore 1...te.png

windows10-2004-x64

NanoCore 1...in.png

windows10-2004-x64

NanoCore 1...en.png

windows10-2004-x64

NanoCore 1...om.png

windows10-2004-x64

NanoCore 1...el.png

windows10-2004-x64

NanoCore 1...og.png

windows10-2004-x64

NanoCore 1...el.png

windows10-2004-x64

NanoCore 1...ry.png

windows10-2004-x64

NanoCore 1...te.dll

windows10-2004-x64

NanoCore 1...er.log

windows10-2004-x64

NanoCore 1...nt.exe

windows10-2004-x64

NanoCore 1...ns.bin

windows10-2004-x64

NanoCore 1...ic.bin

windows10-2004-x64

NanoCore 1...gs.bin

windows10-2004-x64

NanoCore 1...op.dll

windows10-2004-x64

NanoCore 1...op.dll

windows10-2004-x64

Analysis

max time kernel
124s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
24-03-2023 22:40

Sharing

Copy URL

Twitter E-mail

Static task

static1

nanocore

1 signatures

Behavioral task

behavioral1

Sample

NanoCore_1.2.2.0_Cracked_By_Alcatraz3222.rar

Resource

win10v2004-20230221-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/ClientPlugin.xml

Resource

win10v2004-20230221-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/core.sqlite

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/geolocation.sqlite

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/network.sqlite

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/AIO.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/CorePlugin.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/DucPlugin.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/MiscTools.ncp

Resource

win10v2004-20230221-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoBlack.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoCoreSwiss.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoProtectPlugin.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NetworkPlugin.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/SurveillanceExPlugin.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/ToolsPlugin.ncp

Resource

win10v2004-20230221-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/Audio/camera.wav

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/application_delete.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/bin.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/book_open.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/broom.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/cancel.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/cog.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/control_panel.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/ddr_memory.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/System.Data.SQLite.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/builder.log

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/client.exe

Resource

win10v2004-20230220-en

nanocore evasion keylogger spyware stealer trojan

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/plugins.bin

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/public.bin

Resource

win10v2004-20230221-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/settings.bin

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/x64/SQLite.Interop.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/x86/SQLite.Interop.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

NanoCore 1.2.2.0_Cracked By Alcatraz3222/System.Data.SQLite.dll
Size

256KB
MD5

dd3d6f00b1aba3f1d9338d9727ab5f17
SHA1

faf9364a7ab15f27c93a6e6f97fa025030c9dad7
SHA256

f0d4beab24e94e61f219df451d90dbba3d0f48539f9b6a448f91e0c94b4e80c4
SHA512

0794d850a133a98affe627e3023114b229b982e507d366895ece6a1ef99b42d708554c64b52f0f2ed63673e1c5aeea7e794085d45f0797159e21ba4efdf23cd7
SSDEEP

6144:icvnEsATddHqgM69uZ5iFNFGFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchF1:icvnEygM69uZ8FNFGFOFwcGF6cmFWc0z

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\NanoCore 1.2.2.0_Cracked By Alcatraz3222\System.Data.SQLite.dll",#1
1⤵
PID:3468

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads