ceb348dfa61b34bebce021fa783b0afdb874ea7205f75e7fb42b01898439be75

Submit
Reports

Overview

overview

Static

static

NanoCore_1...22.rar

windows10-2004-x64

NanoCore 1...in.xml

windows10-2004-x64

NanoCore 1...sqlite

windows10-2004-x64

NanoCore 1...sqlite

windows10-2004-x64

NanoCore 1...sqlite

windows10-2004-x64

NanoCore 1...IO.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...ls.ncp

windows10-2004-x64

NanoCore 1...ck.ncp

windows10-2004-x64

NanoCore 1...ss.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...in.ncp

windows10-2004-x64

NanoCore 1...ra.wav

windows10-2004-x64

NanoCore 1...te.png

windows10-2004-x64

NanoCore 1...in.png

windows10-2004-x64

NanoCore 1...en.png

windows10-2004-x64

NanoCore 1...om.png

windows10-2004-x64

NanoCore 1...el.png

windows10-2004-x64

NanoCore 1...og.png

windows10-2004-x64

NanoCore 1...el.png

windows10-2004-x64

NanoCore 1...ry.png

windows10-2004-x64

NanoCore 1...te.dll

windows10-2004-x64

NanoCore 1...er.log

windows10-2004-x64

NanoCore 1...nt.exe

windows10-2004-x64

NanoCore 1...ns.bin

windows10-2004-x64

NanoCore 1...ic.bin

windows10-2004-x64

NanoCore 1...gs.bin

windows10-2004-x64

NanoCore 1...op.dll

windows10-2004-x64

NanoCore 1...op.dll

windows10-2004-x64

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
24-03-2023 22:40

Sharing

Copy URL

Twitter E-mail

Static task

static1

nanocore

1 signatures

Behavioral task

behavioral1

Sample

NanoCore_1.2.2.0_Cracked_By_Alcatraz3222.rar

Resource

win10v2004-20230221-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/ClientPlugin.xml

Resource

win10v2004-20230221-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/core.sqlite

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/geolocation.sqlite

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Databases/network.sqlite

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/AIO.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/CorePlugin.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/DucPlugin.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/MiscTools.ncp

Resource

win10v2004-20230221-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoBlack.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoCoreSwiss.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NanoProtectPlugin.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/NetworkPlugin.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/SurveillanceExPlugin.ncp

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Plugins/ToolsPlugin.ncp

Resource

win10v2004-20230221-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/Audio/camera.wav

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/application_delete.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/bin.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/book_open.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/broom.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/cancel.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/cog.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/control_panel.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/Resources/ContextIcons/ddr_memory.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/System.Data.SQLite.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/builder.log

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/client.exe

Resource

win10v2004-20230220-en

nanocore evasion keylogger spyware stealer trojan

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/plugins.bin

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/public.bin

Resource

win10v2004-20230221-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/settings.bin

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/x64/SQLite.Interop.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

NanoCore 1.2.2.0_Cracked By Alcatraz3222/x86/SQLite.Interop.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

NanoCore 1.2.2.0_Cracked By Alcatraz3222/x64/SQLite.Interop.dll
Size

1.3MB
MD5

382398711315e2fa8e93d305b4873908
SHA1

51482242e6d9170963aa27192c8279d20fce19ce
SHA256

270d61d183cff3dafad0db3dbe7942374552044baea1e28411c3a143cb620c02
SHA512

084217e67c125cb9952b91bc9783faf5c1e8fb01750cc1e6b4c3736c47b74dcf3207979c1c497e630e161aff529f71c403af6ca0232a7c3e9e587b58e4495589
SSDEEP

24576:fG4Gnwh2IK88uyMGI1YSbmdtDxnrW1oC0AZDvDetNQT7f+5eKMUxThC35:ewh2IKAYjtNme5eeG

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\NanoCore 1.2.2.0_Cracked By Alcatraz3222\x64\SQLite.Interop.dll",#1
1⤵
PID:4900

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads