NanoCore RAT Under the Microscope
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Msbuild - T1127.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Process Hollowing - T1055.012 Tool - T1588.002 Powershell - T1086 Process Hollowing - T1093
Show in Graph
Common Information
Type Value
UUID 9a85c3cb-4bb8-4076-a13c-52c4801be7a7
Fingerprint 3841880269bfefc9
Analysis status DONE
Considered CTI value 1
Text language
Published Oct. 16, 2019, 3:57 p.m.
Added to db Jan. 18, 2023, 8:36 p.m.
Last updated Dec. 25, 2024, 12:26 p.m.
Headline NanoCore RAT Under the Microscope
Title NanoCore RAT Under the Microscope
Detected Hints/Tags/Attributes 64/2/14
Source URLs
Redirection Url
Details Source http://blog.morphisec.com/nanocore-under-the-microscope
Details Source https://blog.morphisec.com/nanocore-under-the-microscope
URL Provider
Details Provider Source level domain
Details morphisec.com blog.morphisec.com
Attributes
Details Type #Events CTI Value
Details CVE 437 
cve-2017-11882
Details Domain 1 
pastbin.com
Details File 39 
autoit3.exe
Details File 1 
cxf.exe
Details File 1 
qnb.jpg
Details File 43 
avastui.exe
Details File 78 
regsvcs.exe
Details File 243 
advapi32.dll
Details File 821 
kernel32.dll
Details File 584 
ntdll.dll
Details File 314 
user32.dll
Details File 93 
ole32.dll
Details IPv4 15 
1.2.2.0
Details IPv4 1 
3.3.8.1