S0336Windows

S0336NanoCore

Platforms
1
ATT&CK
14.1
References
5

Description

[NanoCore](https://attack.mitre.org/software/S0336) is a modular remote access tool developed in .NET that can be used to spy on victims and steal information. It has been used by threat actors since 2013.(Citation: DigiTrust NanoCore Jan 2017)(Citation: Cofense NanoCore Mar 2018)(Citation: PaloAlto NanoCore Feb 2016)(Citation: Unit 42 Gorgon Group Aug 2018)

Platforms· 1

Windows

References

  1. https://attack.mitre.org/software/S0336
  2. https://www.digitrustgroup.com/nanocore-not-your-average-rat/
  3. https://cofense.com/nanocore-rat-resurfaced-sewers/
  4. https://researchcenter.paloaltonetworks.com/2016/02/nanocorerat-behind-an-increase-in-tax-themed-phishing-e-mails/
  5. https://researchcenter.paloaltonetworks.com/2018/08/unit42-gorgon-group-slithering-nation-state-cybercrime/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
NOKKI
Software
NetTraveler
Software
KONNI
Software
Cobian RAT
Software
Remcos
Software
DarkComet
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.