General

  • Target

    2616-34-0x0000000000400000-0x0000000000438000-memory.dmp

  • Size

    224KB

  • Sample

    240425-j1982aha5t

  • MD5

    e3b70f5efc86c23d88471aed31514da2

  • SHA1

    0a3489c569b9c9db1864ce684a79ce4d6e73212d

  • SHA256

    d57eaa616f5f87aa7eb36a1f098a8e4244ab32ea1a12408944f69d57c683f037

  • SHA512

    445c0edb9dc69225540914dd48ea0b7aa0c6bbb314f5f77e66ace98483d2e0323296c62f087f635c9a5b4115804e94c7b458358c660d7113a5cf80e04ec1371f

  • SSDEEP

    6144:QLV6Bta6dtJmakIM5d4w9QT09e8iCp1Tz5kl:QLV6BtpmkEIIc8iCp1P5kl

Score
10/10

Malware Config

Extracted

Family

nanocore

Version

1.2.2.0

C2

amechi.duckdns.org:3190

Mutex

3ccbc5bb-95bf-4854-a1cd-6f73b82adcba

Attributes
  • activate_away_mode

    true

  • backup_connection_host

    amechi.duckdns.org

  • backup_dns_server

    8.8.4.4

  • buffer_size

    65535

  • build_time

    2024-02-04T08:58:27.782943536Z

  • bypass_user_account_control

    true

  • bypass_user_account_control_data

  • clear_access_control

    true

  • clear_zone_identifier

    false

  • connect_delay

    4000

  • connection_port

    3190

  • default_group

    GLORY

  • enable_debug_mode

    true

  • gc_threshold

    1.048576e+07

  • keep_alive_timeout

    30000

  • keyboard_logging

    false

  • lan_timeout

    2500

  • max_packet_size

    1.048576e+07

  • mutex

    3ccbc5bb-95bf-4854-a1cd-6f73b82adcba

  • mutex_timeout

    5000

  • prevent_system_sleep

    false

  • primary_connection_host

    amechi.duckdns.org

  • primary_dns_server

    8.8.8.8

  • request_elevation

    true

  • restart_delay

    5000

  • run_delay

    0

  • run_on_startup

    false

  • set_critical_process

    true

  • timeout_interval

    5000

  • use_custom_dns_server

    false

  • version

    1.2.2.0

  • wan_timeout

    8000

Targets

    • Target

      2616-34-0x0000000000400000-0x0000000000438000-memory.dmp

    • Size

      224KB

    • MD5

      e3b70f5efc86c23d88471aed31514da2

    • SHA1

      0a3489c569b9c9db1864ce684a79ce4d6e73212d

    • SHA256

      d57eaa616f5f87aa7eb36a1f098a8e4244ab32ea1a12408944f69d57c683f037

    • SHA512

      445c0edb9dc69225540914dd48ea0b7aa0c6bbb314f5f77e66ace98483d2e0323296c62f087f635c9a5b4115804e94c7b458358c660d7113a5cf80e04ec1371f

    • SSDEEP

      6144:QLV6Bta6dtJmakIM5d4w9QT09e8iCp1Tz5kl:QLV6BtpmkEIIc8iCp1P5kl

    Score
    1/10

MITRE ATT&CK Matrix

Tasks