2021-07-28 Nanocore IOCs

THREAT IDENTIFICATION:  NANOCORE

SUBJECTS OBSERVED
RE: New Order

SENDERS OBSERVED
ufo@myjetkpress.com
Reply-To: shafy.espi@gmail.com

EMAIL BODY
Dear Sir/Ma'am,

We are interested in your product, We are Metallurgical Industries
company (E.JS.C) from Saudi Arabia , also we buy in large quantities,

Kindly send me your best price of the attached Order and provide me with
your product catalogs, so that we can select more items for our company.

We have provided some of the products we buy in the attached file.

Indicate your minimum order quantity for our reference?

Waiting for your reply

Thanks.

Sabri Tahir Al Asmakh
Sales Manager, Saudi Arabia

MALDOC FILE HASHES
Order No.916754.gz
65a94caa7ec24ca10c22792ee762a42c

NANOCORE PAYLOAD FILE HASHES
Order No.916754.exe
4a4d763bca1ebc9e0986c1bc3e8bd7bd

NANOCORE C2
https://79.134.225.100:1985

SUPPORTING EVIDENCE
https://app.any.run/tasks/4a17112f-71b9-4eea-aa37-793d609f4732/