General
- Target 88mhome.exe
- Size 202KB
- Sample260815-ss86fazsgv
- SHA256 b52e20fc6759d3d1ac7ffd079e5702492ddc348829d69f610f571e5592efb033
- MD5 d9162f1dca777ac0dde511c271e8cf28
- SHA1 78abb3650e4ad4d52397981c783ef0c7ff94d5f8
- SHA512 8882208b190566fe0dcec9ed1e61029a9f06be95d3e06b64ccb2b093ef346aac18af18dfe51491d3b3bea5fe7f9a8a7321292fd384fefeed08553fe43c1bcb01
- SSDEEP 3072:wzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HIPET9cx77B7aqetQ0XdeMBma1Q:wLV6Bta6dtJmakIM58x79PEQ8QVP5
- TLSH T1CE14BF5677A84A2FE2DE8679612252028339C2E3ACC3F3DF28D455B75F667E4060B1D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
88mhome.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
88mhome.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
nanocore
Version
-
1.2.2.0
C2
-
88mhomebet.com:443
-
mvskiran.me:443
Mutex
-
b0cda74b-1a64-4f66-8904-16d4dc105030
Attributes
-
activate_away_mode
false
-
backup_connection_host
mvskiran.me
-
backup_dns_server
8.8.4.4
-
buffer_size
65535
-
build_time
2026-05-27T17:05:21.065274836Z
-
bypass_user_account_control
true
- bypass_user_account_control_data
-
clear_access_control
false
-
clear_zone_identifier
false
-
connect_delay
4000
-
connection_port
443
-
default_group
88M Home
-
enable_debug_mode
false
-
gc_threshold
1.048576e+07
-
keep_alive_timeout
30000
-
keyboard_logging
false
-
lan_timeout
2500
-
max_packet_size
1.048576e+07
-
mutex
b0cda74b-1a64-4f66-8904-16d4dc105030
-
mutex_timeout
5000
-
prevent_system_sleep
false
-
primary_connection_host
88mhomebet.com
-
primary_dns_server
8.8.8.8
-
request_elevation
false
-
restart_delay
5000
-
run_delay
0
-
run_on_startup
false
-
set_critical_process
true
-
timeout_interval
5000
-
use_custom_dns_server
false
-
version
1.2.2.0
-
wan_timeout
8000
Targets
-
- Target 88mhome.exe
- Size 202KB
- SHA256 b52e20fc6759d3d1ac7ffd079e5702492ddc348829d69f610f571e5592efb033
- MD5 d9162f1dca777ac0dde511c271e8cf28
- SHA1 78abb3650e4ad4d52397981c783ef0c7ff94d5f8
- SHA512 8882208b190566fe0dcec9ed1e61029a9f06be95d3e06b64ccb2b093ef346aac18af18dfe51491d3b3bea5fe7f9a8a7321292fd384fefeed08553fe43c1bcb01
- SSDEEP 3072:wzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HIPET9cx77B7aqetQ0XdeMBma1Q:wLV6Bta6dtJmakIM58x79PEQ8QVP5
- TLSH T1CE14BF5677A84A2FE2DE8679612252028339C2E3ACC3F3DF28D455B75F667E4060B1D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled