Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
https://limewire.com/d/27b994ee-0c38-4fb0-8767-3b7a8e2ee8ca#mmZRNIH00rM5Wk405nVt8hrmUCVnDbtQXKF29aby3ac
-
Sample
250311-s8223ayscv
Score
10/10
Malware Config
Targets
-
-
Target
https://limewire.com/d/27b994ee-0c38-4fb0-8767-3b7a8e2ee8ca#mmZRNIH00rM5Wk405nVt8hrmUCVnDbtQXKF29aby3ac
Score10/10-
NanoCore
NanoCore is a remote access tool (RAT) with a variety of capabilities.
-
Nanocore family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1