limerat | f1b685a08a570bdbd92ef407a5d027ece28767d84be2cb6b7a58ed2ff77dba60 | Triage

Sharing

General

Target

f1b685a08a570bdbd92ef407a5d027ece28767d84be2cb6b7a58ed2ff77dba60
Size

80KB
Sample

221130-prt4cadf71
MD5

9362e14f55f1983aac9c2d6030d813e1
SHA1

2b84bd9da685a8e5fa68472d7169fda83b19051c
SHA256

f1b685a08a570bdbd92ef407a5d027ece28767d84be2cb6b7a58ed2ff77dba60
SHA512

e674ad930fa0df14f55c459450e3b8e01ed5f04407a0207adbff111429c7b9ec666b5adadc4f22071fd6123ea62345a3b6839f57a670995a29a2be10c9cab171
SSDEEP

1536:zfpyn1WwkQK3j2gWX+L4dHnfeBu+LOnti7z6m:zRc9kQAWOMdHmJOntiX6

Score

10^/10

limerat rat

Malware Config

Targets

- Target
  
  f1b685a08a570bdbd92ef407a5d027ece28767d84be2cb6b7a58ed2ff77dba60
- Size
  
  80KB
- MD5
  
  9362e14f55f1983aac9c2d6030d813e1
- SHA1
  
  2b84bd9da685a8e5fa68472d7169fda83b19051c
- SHA256
  
  f1b685a08a570bdbd92ef407a5d027ece28767d84be2cb6b7a58ed2ff77dba60
- SHA512
  
  e674ad930fa0df14f55c459450e3b8e01ed5f04407a0207adbff111429c7b9ec666b5adadc4f22071fd6123ea62345a3b6839f57a670995a29a2be10c9cab171
- SSDEEP
  
  1536:zfpyn1WwkQK3j2gWX+L4dHnfeBu+LOnti7z6m:zRc9kQAWOMdHmJOntiX6
Score

10^/10

limerat rat
- LimeRAT
  Simple yet powerful RAT for Windows machines written in .NET.
  rat limerat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Web Service

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2