General
- Target NanoCore_Portable.exe
- Size 6.4MB
- Sample260812-q6txkahn5s
- SHA256 59e59bdde6e394e14326f693cba8ab7604a20e7f3df9806f539844d499a701bc
Score
10/10
Malware Config
Targets
-
- Target NanoCore_Portable.exe
- Size 6.4MB
- SHA256 59e59bdde6e394e14326f693cba8ab7604a20e7f3df9806f539844d499a701bc
Score10/10-
Family: NanoCore
NanoCore is a remote access tool (RAT) with a variety of capabilities.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL