Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
12-01-2025 10:20
General
-
Target
fc852a6d9cf7897876a229a49827a63366c5e78a20c6d156b0f2b9f7f766148e.exe
-
Size
3.7MB
-
MD5
3d43a6bc516ead23366722de85f2d29e
-
SHA1
7def8c22d6f6648294eb579b4f42453c16ad9587
-
SHA256
fc852a6d9cf7897876a229a49827a63366c5e78a20c6d156b0f2b9f7f766148e
-
SHA512
a792e9e496fb0b04ee1ced566481dbbb0c44373d6b79dc4470261f103fbeba1d21bc3f4ee270e965d43240237bafa42604c1fb1251267dc6dcfaad6a29eb74c8
-
SSDEEP
98304:J03GZpn+8vcAAWrX+ndJAOscZ3/hMZMI0JfVy:J0Wrc6OnsOscZGf0J
Malware Config
Signatures
-
NanoCore
NanoCore is a remote access tool (RAT) with a variety of capabilities.
-
Nanocore family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\fc852a6d9cf7897876a229a49827a63366c5e78a20c6d156b0f2b9f7f766148e.exe"C:\Users\Admin\AppData\Local\Temp\fc852a6d9cf7897876a229a49827a63366c5e78a20c6d156b0f2b9f7f766148e.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
5.7MB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
144KB
-
Filesize
144KB
-
Filesize
144KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
5.7MB