MalwareConfig
Details
<table class="table table-striped table-bordered table-sm">
<tr>
<th>FileName</th>
<td><a href="/stats//">decimal.dat</a></td>
</tr>
<tr>
<th>Malware Family</th>
<td><a href="/stats//">NanoCore</a></td>
</tr>
<tr>
<th>Date Added</th>
<td>2021-03-26 11:53:16.019000</td>
</tr>
<tr>
<th>MD5</th>
<td>52beaea292d998d9c04fb0ec947787b3</td>
</tr>
<tr>
<th>Sha256</th>
<td>029ab13c01e83c65048e1264f03057d6da0185efb21e80c7fa3f9da38a6f2eb5</td>
</tr>
<tr>
<th>Robot</th>
<td>Robots lovingly delivered by <a href="https://robohash.org">robohash.org</a></td>
</tr>
</table>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="row mt-5">
<div class="col">
<div class="card">
<div class="card-header">
Advertising
</div>
<div class="card-body">
<!-- ducktoolkit-leaderboard -->
<ins class="adsbygoogle"
style="display:inline-block;width:728px;height:90px"
data-ad-client="ca-pub-1435553701793282"
data-ad-slot="1601555780"></ins>
</div>
</div>
</div>
</div>
<div class="row mt-5">
<div class="col">
<div class="card">
<div class="card-header">
Config Data
</div>
<table class="table table-striped table-bordered table-sm">
<tr>
<th>Version</th>
<td>b'\x071.2.2.0'</td>
</tr>
<tr>
<th>Mutex</th>
<td>b'29!+#\xbe\x02N\xad\xe9\xfa\x90C\x94\xe7x'</td>
</tr>
<tr>
<th>Group</th>
<td>b'jumper'</td>
</tr>
<tr>
<th>Domain1</th>
<td>b'18.184.222.225'</td>
</tr>
<tr>
<th>Domain2</th>
<td>b'127.0.0.1'</td>
</tr>
<tr>
<th>Port</th>
<td>41432</td>
</tr>
<tr>
<th>RunOnStartup</th>
<td>b'\x00'</td>
</tr>
<tr>
<th>RequestElevation</th>
<td>b'\x00'</td>
</tr>
<tr>
<th>BypassUAC</th>
<td>b'\x00'</td>
</tr>
<tr>
<th>ClearZoneIdentifier</th>
<td>b'\x01'</td>
</tr>
<tr>
<th>ClearAccessControl</th>
<td>b'\x01'</td>
</tr>
<tr>
<th>SetCriticalProcess</th>
<td>b'\x00'</td>
</tr>
<tr>
<th>PreventSystemSleep</th>
<td>b'\x01'</td>
</tr>
<tr>
<th>EnableDebugMode</th>
<td>b'\x00'</td>
</tr>
<tr>
<th>ConnectDelay</th>
<td>4000</td>
</tr>
<tr>
<th>RestartDelay</th>
<td>5000</td>
</tr>
<tr>
<th>UseCustomDNS</th>
<td>b'\x01'</td>
</tr>
<tr>
<th>PrimaryDNSServer</th>
<td>b'8.8.8.8'</td>
</tr>
</table>
</div>
</div>
</div>
<div class="row mt-5">
<div class="col">
<div class="card">
<div class="card-header">
Virustotal
</div>
<div class="card-body">
<p>0 out of 0 AV Engines identified the sample as Malicious.</p>
<p><a href="0">Virustotal Report</a></p>
</div>
</div>
</div>
</div>