nanocore | hxxp://temp[.]sh/mqiqs/test3[.]exe | Triage™

Login
Reports

Overview

overview

Static

static

1

URLScan

urlscan

1

http://temp.sh/mqiqs...

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
http://temp.sh/mqiqs/test3.exe
Sample240507-atap6adb79

Score

10^/10

nanocore evasion keylogger persistence spyware stealer trojan

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://temp.sh/mqiqs/test3.exe

Resource

win11-20240419-en

windows11-21h2-x64

15 signatures

1800 seconds

nanocore evasion keylogger persistence spyware stealer trojan

Malware Config

Targets

- Target
  http://temp.sh/mqiqs/test3.exe
Score

10^/10

nanocore evasion keylogger persistence spyware stealer trojan
- NanoCore
  NanoCore is a remote access tool (RAT) with a variety of capabilities.
  keylogger trojan stealer spyware nanocore
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

nanocoreevasionkeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy