General

  • Target

    NetLimiter.v4.1.12 SAMPLE.zip

  • Size

    4.3MB

  • Sample

    211101-p73qeshhd3

  • MD5

    831d0810eef1b0c38091ddb2e9594360

  • SHA1

    4afe3b960033129da19cba8e29ce6f813c33d546

  • SHA256

    cd7038d9c290ad8fcb241c29c5b065503f20fcb8b7d2a6358bee1293dcdb985f

  • SHA512

    b420d9f924e221120c7fac93a1b1fdb4fbaf39bf406a6d15aecaa5b55ad3f61a3b35243c1329765002761259dea82f8fe65e88004e114b23404d73b34cd09bad

Malware Config

Targets

    • Target

      NetLimiter.v4.1.12.exe

    • Size

      4.8MB

    • MD5

      eb0fb019c0626149b93cdc23435c48db

    • SHA1

      e384eadb10e73b01dfef362eeed4f35a7dc0e8de

    • SHA256

      cf456e778483f20af00ed1db5332d5bb7bb4f330ecb1b30cca20101c565c3a16

    • SHA512

      252210421d2788778a09f4492dd37780f5f94dabeb5fd1d064a9336031217c99a397c9ac26a7a8aeb2de135e5f0f8b53c144197d0144e0b4145355ccb2945881

    • RevcodeRat, WebMonitorRat

      WebMonitor is a remote access tool that you can use from any browser access to control, and monitor your phones, or PCs.

    • WebMonitor Payload

    • Downloads MZ/PE file

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops startup file

MITRE ATT&CK Matrix

Tasks