limerat | 50538ff9d7f97c4b8c1e37f74462e199d91319e9df2e9c26d3a07da30ed65dcf | Triage

Sharing

General

Target

50538ff9d7f97c4b8c1e37f74462e199d91319e9df2e9c26d3a07da30ed65dcf
Size

97KB
Sample

221130-ryn7sacc8s
MD5

f16c15ada304dd64e7b3b00dd4417c3e
SHA1

47f98785fa32a23f813949e830759c81ed94b9af
SHA256

50538ff9d7f97c4b8c1e37f74462e199d91319e9df2e9c26d3a07da30ed65dcf
SHA512

1823a4b0f055ec3ea3ddf8b91add1d0eaaf506b7e417aa960cffe9798e36c6c57de9621ddf5153dda7182a051129b88f79d97bf3b8911dd5762fcb062878b7a6
SSDEEP

1536:opVExNAkP07kGRG5ByufTZUi7FRf6sYchCZNevpo:uaUkP8kGRi5fTj7Hf6sYLZH

Score

10^/10

limerat rat

Malware Config

Targets

- Target
  
  50538ff9d7f97c4b8c1e37f74462e199d91319e9df2e9c26d3a07da30ed65dcf
- Size
  
  97KB
- MD5
  
  f16c15ada304dd64e7b3b00dd4417c3e
- SHA1
  
  47f98785fa32a23f813949e830759c81ed94b9af
- SHA256
  
  50538ff9d7f97c4b8c1e37f74462e199d91319e9df2e9c26d3a07da30ed65dcf
- SHA512
  
  1823a4b0f055ec3ea3ddf8b91add1d0eaaf506b7e417aa960cffe9798e36c6c57de9621ddf5153dda7182a051129b88f79d97bf3b8911dd5762fcb062878b7a6
- SSDEEP
  
  1536:opVExNAkP07kGRG5ByufTZUi7FRf6sYchCZNevpo:uaUkP8kGRi5fTj7Hf6sYLZH
Score

10^/10

limerat rat
- LimeRAT
  Simple yet powerful RAT for Windows machines written in .NET.
  rat limerat
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Web Service

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2