General
- Target https://file.kiwi/bfb4f853#vMAGRg5cF5TUCP7j-tdeZw
- Sample250101-zhmm1svrhj
Score
10/10
Malware Config
Targets
-
- Target https://file.kiwi/bfb4f853#vMAGRg5cF5TUCP7j-tdeZw
Score10/10NanoCore
NanoCore is a remote access tool (RAT) with a variety of capabilities.
Nanocore family
A potential corporate email address has been identified in the URL: [email protected]
Executes dropped EXE
Adds Run key to start application
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1