110c0ac80f4d6a7e73183cf5a98f83440943afe69abca9a572ca4a4e54de7d13 | Triage

Submit
Reports

Overview

overview

Static

static

NanoCore-m...in.dll

windows7-x64

1

NanoCore-m...in.dll

windows10-2004-x64

1

NanoCore-m...ib.dll

windows7-x64

1

NanoCore-m...ib.dll

windows10-2004-x64

1

NanoCore-m...er.exe

windows7-x64

1

NanoCore-m...er.exe

windows10-2004-x64

1

NanoCore-m...re.exe

windows7-x64

NanoCore-m...re.exe

windows10-2004-x64

NanoCore-m...in.dll

windows7-x64

1

NanoCore-m...in.dll

windows10-2004-x64

1

NanoCore-m...te.dll

windows7-x64

1

NanoCore-m...te.dll

windows10-2004-x64

1

NanoCore-m...nt.exe

windows7-x64

3

NanoCore-m...nt.exe

windows10-2004-x64

7

NanoCore-m...op.dll

windows7-x64

1

NanoCore-m...op.dll

windows10-2004-x64

1

NanoCore-m...op.dll

windows7-x64

3

NanoCore-m...op.dll

windows10-2004-x64

3

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20250129-en
resource tags

arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
submitted
06-02-2025 08:06

Sharing

Static task

static1

darkcomet nanocore

3 signatures

Behavioral task

behavioral1

Sample

NanoCore-master/sample/ClientPlugin.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

NanoCore-master/sample/ClientPlugin.dll

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

NanoCore-master/sample/Interop.NATUPNPLib.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

NanoCore-master/sample/Interop.NATUPNPLib.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

NanoCore-master/sample/NanoCore Plugin Compiler.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

NanoCore-master/sample/NanoCore Plugin Compiler.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

NanoCore-master/sample/NanoCore.exe

Resource

win7-20240708-en

darkcomet nanocore idman defense_evasion discovery keylogger persistence rat spyware stealer trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral8

Sample

NanoCore-master/sample/NanoCore.exe

Resource

win10v2004-20250129-en

darkcomet idman defense_evasion discovery persistence rat trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral9

Sample

NanoCore-master/sample/ServerPlugin.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

NanoCore-master/sample/ServerPlugin.dll

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

NanoCore-master/sample/System.Data.SQLite.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

NanoCore-master/sample/System.Data.SQLite.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

NanoCore-master/sample/client.exe

Resource

win7-20241023-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

NanoCore-master/sample/client.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

NanoCore-master/sample/x64/SQLite.Interop.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

NanoCore-master/sample/x64/SQLite.Interop.dll

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

NanoCore-master/sample/x86/SQLite.Interop.dll

Resource

win7-20240729-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

NanoCore-master/sample/x86/SQLite.Interop.dll

Resource

win10v2004-20250129-en

windows10-2004-x64

2 signatures

150 seconds

Report Analysis Logs

General

Target

NanoCore-master/sample/ClientPlugin.dll
Size

21KB
MD5

76e5644095c157a93891a664c33b085a
SHA1

16a09ce01e7fcc166bb5789a43e2e4573c80ed90
SHA256

28aa78d701b161735c1da30e79076dcebe22eb3ec71215b7ab829cd1e2e38adc
SHA512

f593ca82bb547f599c75b600bfa1c36702eb23bf2eaa3dfed6f13ec07d79c60852a550696b55fc68855821db6db9f8e273e8206b8020fb8f7ed83328e6716c39
SSDEEP

192:GLCmfMVf2kwrPVBnlYJL/ejZuNIiLTg5KR82SOs:GL10fIjUqjZObLTtRF

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\NanoCore-master\sample\ClientPlugin.dll,#1
1⤵
PID:3704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy