Overview

overview

10

Static

static

3

NanoCore_Portable.exe

windows7-x64

10

NanoCore_Portable.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NanoCore_Portable.exe

  • Size

    6.4MB

  • Sample

    250308-3m33cavkx6

  • MD5

    d8097b543928f1ae74e17ae06e941366

  • SHA1

    639cbf9d926c767a850d349dc09d2947ddb50ab2

  • SHA256

    59e59bdde6e394e14326f693cba8ab7604a20e7f3df9806f539844d499a701bc

  • SHA512

    48a25a1799376f1d2b754ebb00203ffde7f28208debbbddcefa6f77b34d7ae95271f8894725aab546d254678954fb918c3cef87f8899b31121b5151c777d6ae0

  • SSDEEP

    196608:y91pFyYcveZFtjA9kIUgon9ZBJHEfWOXo5:y9BmvAOVo9Z3kfRg

Score
10/10
nanocorediscoverykeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      NanoCore_Portable.exe

    • Size

      6.4MB

    • MD5

      d8097b543928f1ae74e17ae06e941366

    • SHA1

      639cbf9d926c767a850d349dc09d2947ddb50ab2

    • SHA256

      59e59bdde6e394e14326f693cba8ab7604a20e7f3df9806f539844d499a701bc

    • SHA512

      48a25a1799376f1d2b754ebb00203ffde7f28208debbbddcefa6f77b34d7ae95271f8894725aab546d254678954fb918c3cef87f8899b31121b5151c777d6ae0

    • SSDEEP

      196608:y91pFyYcveZFtjA9kIUgon9ZBJHEfWOXo5:y9BmvAOVo9Z3kfRg

    Score
    10/10
    nanocorediscoverykeyloggerspywarestealertrojan

    • NanoCore

      NanoCore is a remote access tool (RAT) with a variety of capabilities.

      keyloggertrojanstealerspywarenanocore

    • Nanocore family

      nanocore

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks