The .rar file mentioned in your query is a common delivery method. Typically, NanoCore is distributed via:
Avoid opening .rar or .zip attachments from unknown senders. NanoCore_1.2.2.0.rar
It establishes persistent communication with a Command-and-Control (C2) server to receive instructions and exfiltrate data. NanoCore_1.2.2.0.rar