Overview
overview
10Static
static
10nanacore/1.exe
windows10-2004-x64
10nanacore/C...in.dll
windows10-2004-x64
1nanacore/NanoCore.exe
windows10-2004-x64
1nanacore/P...er.exe
windows10-2004-x64
1nanacore/S...in.dll
windows10-2004-x64
1nanacore/S...te.dll
windows10-2004-x64
1nanacore/client.exe
windows10-2004-x64
10nanacore/x...op.dll
windows10-2004-x64
1nanacore/x...op.dll
windows10-2004-x64
1Analysis
-
max time kernel
59s -
max time network
65s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
27-03-2023 22:03
Behavioral task
behavioral1
Sample
nanacore/1.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
nanacore/ClientPlugin.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
nanacore/NanoCore.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
nanacore/PluginCompiler.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
nanacore/ServerPlugin.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
nanacore/System.Data.SQLite.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
nanacore/client.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral8
Sample
nanacore/x64/SQLite.Interop.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
nanacore/x86/SQLite.Interop.dll
Resource
win10v2004-20230220-en
General
-
Target
nanacore/PluginCompiler.exe
-
Size
75KB
-
MD5
e2d1c5df11f9573f6c5d0a7ad1a79fbf
-
SHA1
b32bf571aca1b51af48f7f2f955aaf1bbdc5aa2f
-
SHA256
0b41b2fcd0f1a4e913d3efe293f713849d59efebb27bac060ab31bed51ac2f6b
-
SHA512
9c9ae7baa504dd34311f5730280f6a49e10eefdb145d2d29849e385a7da47c8f2c182cd6f39949f5904ef8462fc5c3dfaf1bc4cc8bff50c6750c9edc886192e0
-
SSDEEP
1536:iyVzgm8NqToL6n975lw8FDx39EhPKu4iV1Y:iyVMLUTos5SAx3ChPKpiVe
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1496-133-0x0000000000610000-0x0000000000628000-memory.dmpFilesize
96KB
-
memory/1496-134-0x000000001B6C0000-0x000000001B766000-memory.dmpFilesize
664KB
-
memory/1496-135-0x000000001BC40000-0x000000001C10E000-memory.dmpFilesize
4.8MB
-
memory/1496-136-0x000000001CBF0000-0x000000001CC8C000-memory.dmpFilesize
624KB
-
memory/1496-137-0x0000000000A70000-0x0000000000A80000-memory.dmpFilesize
64KB
-
memory/1496-138-0x0000000000DA0000-0x0000000000DA8000-memory.dmpFilesize
32KB
-
memory/1496-139-0x000000001CCC0000-0x000000001CD0C000-memory.dmpFilesize
304KB
-
memory/1496-140-0x0000000000A70000-0x0000000000A80000-memory.dmpFilesize
64KB
-
memory/1496-141-0x0000000000A70000-0x0000000000A80000-memory.dmpFilesize
64KB
-
memory/1496-142-0x0000000000A70000-0x0000000000A80000-memory.dmpFilesize
64KB
-
memory/1496-143-0x0000000000A70000-0x0000000000A80000-memory.dmpFilesize
64KB
-
memory/1496-144-0x0000000000A70000-0x0000000000A80000-memory.dmpFilesize
64KB