Details
FileName | |
---|---|
Malware Family | NanoCore |
Date Added | 2015-09-17 14:19:11 |
MD5 | 67152fadde2eaf09de4677869662ab95 |
Sha256 | b013962f5e280d7b50de51d4a8e7cd6ed9d36b0a0b19dd760765cbd76a3fcf67 |
Robot | Robots lovingly delivered by robohash.org |
Advertising
Config Data
SetCriticalProcess | 00 |
---|---|
RestartDelay | 5000 |
Group | DarkComet |
Domain2 | 127.0.0.1 |
ConnectDelay | 4000 |
UseCustomDNS | 01 |
ClearAccessControl | 01 |
BypassUAC | 00 |
PrimaryDNSServer | |
Mutex | b93edaedf03ac7459c50c269677565b8 |
Version | 1.2.2.0 |
PreventSystemSleep | 01 |
RequestElevation | 00 |
ClearZoneIdentifier | 01 |
RunOnStartup | 01 |
Domain1 | host-l6w.mooo.com |
EnableDebugMode | 00 |
Port | 1230 |
BackupDNSServer |
Virustotal
0 out of 0 AV Engines identified the sample as Malicious.