@pmelson I'm thinking so...nothing like the #nanocore of old that we use to look at years ago.

#nanocore......#ransomware ..?

https://app.any.run/tasks/0f06cf0b-8417-4e7d-83db-0fd384472772

No files actually encrypted though 🤔

live #nanocore #C2 server
167.99.64[.]212:5005

confirmed 2026-03-26

live #nanocore #C2 server
192.169.69[.]25:57222
sixershost[.]duckdns[.]org
confirmed 2026-03-14

live #nanocore #C2 server
159.26.100[.]159:59476

confirmed 2026-02-19

live #nanocore #C2 server
45.55.35[.]48:80
isof63umlw[.]loclx[.]io
confirmed 2026-02-18

live #nanocore #C2 server
159.26.100[.]129:53024

confirmed 2026-02-18

live #nanocore #C2 server
192.169.69[.]25:6483
respainc[.]duckdns[.]org
confirmed 2026-02-16

live #nanocore #C2 server
31.13.190[.]234:5812

confirmed 2026-02-08

live #nanocore #C2 server
213.152.162[.]69:5580

confirmed 2026-02-02