NanoCore RAT Hunting Guide
Tags
attack-pattern: Data Direct Model Models Cloud Services - T1021.007 Control Panel - T1218.002 Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Domains - T1583.001 Domains - T1584.001 Dynamic Dns - T1311 Dynamic Dns - T1333 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 5d212e90-4f76-4dc2-9b6d-a89dc4d7091f
Fingerprint ac998d51e81abc98
Analysis status DONE
Considered CTI value -2
Text language
Published Sept. 14, 2022, 6:03 a.m.
Added to db Sept. 26, 2022, 9:33 a.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline NanoCore RAT Hunting Guide
Title NanoCore RAT Hunting Guide
Detected Hints/Tags/Attributes 67/1/17
Source URLs
Redirection Url
Details Source https://medium.com/@the_abjuri5t/nanocore-rat-hunting-guide-cb185473c1e0
URL Provider
Details Provider Source level domain
Details medium.com medium.com
Attributes
Details Type #Events CTI Value
Details Domain 911 
any.run
Details Domain 41 
ddns.net
Details Domain 29 
duckdns.org
Details Domain 23 
hopto.org
Details Domain 4 
bounceme.net
Details Domain 4 
3utilities.com
Details Domain 30 
ngrok.io
Details Domain 4128 
github.com
Details Domain 40 
gchq.github.io
Details File 1 
ip-list.txt
Details File 1 
domain-list.txt
Details File 1 
indicators-of-compromise.csv
Details Github username 1 
abjuri5t
Details IPv4 295 
8.8.8.8
Details IPv4 63 
8.8.4.4
Details Url 1 
https://github.com/abjuri5t/hunting-nanocore
Details Url 1 
https://gchq.github.io/cyberchef/#recipe=