Analysis
- max time kernel
147s - max time network
118s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
- submitted
09/05/2024, 01:33
General
- Target client.exe
- Size 130KB
- Sample240509-by1mtadf43
- SHA256 9d3ea5af7dc261bf93c76f55d702a315aa22fb241e4207dc86cd834c262245c8
Malware Config
Signatures
- NanoCore
NanoCore is a remote access tool (RAT) with a variety of capabilities.
- Checks whether UAC is enabled 1 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\client.exe"C:\Users\Admin\AppData\Local\Temp\client.exe"1⤵
- Checks whether UAC is enabled
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2416-0-0x000007FEF5B2E000-0x000007FEF5B2F000-memory.dmp
memory/2416-1-0x000007FEF5870000-0x000007FEF620D000-memory.dmp
memory/2416-2-0x000007FEF5870000-0x000007FEF620D000-memory.dmp
memory/2416-4-0x000007FEF5870000-0x000007FEF620D000-memory.dmp
memory/2416-5-0x000007FEF5870000-0x000007FEF620D000-memory.dmp
memory/2416-6-0x0000000000180000-0x000000000018A000-memory.dmp
memory/2416-7-0x000007FEF5870000-0x000007FEF620D000-memory.dmp
memory/2416-8-0x000007FEF5B2E000-0x000007FEF5B2F000-memory.dmp
memory/2416-9-0x000007FEF5870000-0x000007FEF620D000-memory.dmp
memory/2416-10-0x000007FEF5870000-0x000007FEF620D000-memory.dmp
memory/2416-11-0x000007FEF5870000-0x000007FEF620D000-memory.dmp
memory/2416-12-0x000007FEF5870000-0x000007FEF620D000-memory.dmp