nanocore | 7c1f3747508f5ec12c0f2979e1fa2e5fd62ca5c135a859947f43be74d09109bf | Triage

Sharing

General

Target

e18f19570a01a97b669b8d24c7e310ff
Size

6.3MB
Sample

240327-nl9q6sec2w
MD5

e18f19570a01a97b669b8d24c7e310ff
SHA1

e7c8fbee74f9f94d9710b3350c2cf933aedfb96c
SHA256

7c1f3747508f5ec12c0f2979e1fa2e5fd62ca5c135a859947f43be74d09109bf
SHA512

43a886573e86f4631b5190532229d5e9867b547cd99892f43cac160d2c7455e33c8d5c5f83ffd050fa2dc3923dfd3d6769d2c806f4e6e046c431044fe746d6dc
SSDEEP

196608:ebz2DI5YvQnW9mybL/vjZq8xMTe0lNCoyFY3EwgdeqQDXGv2Mv/uum+hgdpLkSZo:85YLmmDBYm63sSbWJuPIe/Z

Score

10^/10

nanocore evasion keylogger spyware stealer trojan

Malware Config

Targets

- Target
  
  e18f19570a01a97b669b8d24c7e310ff
- Size
  
  6.3MB
- MD5
  
  e18f19570a01a97b669b8d24c7e310ff
- SHA1
  
  e7c8fbee74f9f94d9710b3350c2cf933aedfb96c
- SHA256
  
  7c1f3747508f5ec12c0f2979e1fa2e5fd62ca5c135a859947f43be74d09109bf
- SHA512
  
  43a886573e86f4631b5190532229d5e9867b547cd99892f43cac160d2c7455e33c8d5c5f83ffd050fa2dc3923dfd3d6769d2c806f4e6e046c431044fe746d6dc
- SSDEEP
  
  196608:ebz2DI5YvQnW9mybL/vjZq8xMTe0lNCoyFY3EwgdeqQDXGv2Mv/uum+hgdpLkSZo:85YLmmDBYm63sSbWJuPIe/Z
Score

10^/10

nanocore evasion keylogger spyware stealer trojan
- NanoCore
  NanoCore is a remote access tool (RAT) with a variety of capabilities.
  keylogger trojan stealer spyware nanocore
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

nanocoreevasionkeyloggerspywarestealertrojan

behavioral2

nanocoreevasionkeyloggerspywarestealertrojan