Overview
overview
7Static
static
3njRAT Lime...il.dll
windows10-2004-x64
1njRAT Lime....0.exe
windows10-2004-x64
1njRAT Lime...er.exe
windows10-2004-x64
1njRAT Lime...am.dll
windows10-2004-x64
1njRAT Lime...ch.dll
windows10-2004-x64
1njRAT Lime...ic.dll
windows10-2004-x64
1njRAT Lime...s2.exe
windows10-2004-x64
7njRAT Lime...lg.dll
windows10-2004-x64
1njRAT Lime...pw.dll
windows10-2004-x64
1njRAT Lime...or.exe
windows10-2004-x64
7njRAT Lime...c2.dll
windows10-2004-x64
1njRAT Lime...ed.exe
windows10-2004-x64
7njRAT Lime...s.html
windows10-2004-x64
6njRAT Lime...p.html
windows10-2004-x64
6njRAT Lime...et.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
njRAT Lime Edition/Mono.Cecil.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral2
Sample
njRAT Lime Edition/NjRat Lime Edition 0.8.0.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
njRAT Lime Edition/Plugin Compiler.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
njRAT Lime Edition/Plugin/cam.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
njRAT Lime Edition/Plugin/ch.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
njRAT Lime Edition/Plugin/mic.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
njRAT Lime Edition/Plugin/pass2.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral8
Sample
njRAT Lime Edition/Plugin/plg.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
njRAT Lime Edition/Plugin/pw.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
njRAT Lime Edition/Plugin/reactor.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
njRAT Lime Edition/Plugin/sc2.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
njRAT Lime Edition/Plugin/seed.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
njRAT Lime Edition/Support/Explain Functions.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral14
Sample
njRAT Lime Edition/Support/Help.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
njRAT Lime Edition/WinMM.Net.dll
Resource
win10v2004-20230220-en
General
-
Target
njRAT Lime Edition.zip
-
Size
16.9MB
-
MD5
6ae8c6f2443cf1f958592874291046ad
-
SHA1
5dd9175ac7a8a9eec2b2413396116c8217851956
-
SHA256
9f6fdd818a4b49669dbf50a29517094b6879cb0d1a70d3d07eb0b49a444489d8
-
SHA512
cee36eef8f809d3821d3960ec093993cfb2a42a05ed70604402448bbea4fc16985e8b67fa4f7254c253aebf2bb33a4bed800d0a5cebce495387c234db721d882
-
SSDEEP
393216:H5N2SV1WbKZRiKx8c8Ipp31Uszqn0fMPTdp7mM:Z4itZRJx86pp31C8MPzmM
Malware Config
Signatures
-
Unsigned PE 13 IoCs
Checks for missing Authenticode signature.
resource unpack001/njRAT Lime Edition/Mono.Cecil.dll unpack001/njRAT Lime Edition/NjRat Lime Edition 0.8.0.exe unpack001/njRAT Lime Edition/Plugin Compiler.exe unpack001/njRAT Lime Edition/Plugin/cam.dll unpack001/njRAT Lime Edition/Plugin/ch.dll unpack001/njRAT Lime Edition/Plugin/mic.dll unpack001/njRAT Lime Edition/Plugin/pass2.exe unpack001/njRAT Lime Edition/Plugin/plg.dll unpack001/njRAT Lime Edition/Plugin/pw.dll unpack001/njRAT Lime Edition/Plugin/reactor.exe unpack001/njRAT Lime Edition/Plugin/sc2.dll unpack001/njRAT Lime Edition/Plugin/seed.exe unpack001/njRAT Lime Edition/WinMM.Net.dll
Files
-
njRAT Lime Edition.zip.zip
-
njRAT Lime Edition/GeoIP.dat
-
njRAT Lime Edition/Icons/icon (1).ico
-
njRAT Lime Edition/Icons/icon (10).ico
-
njRAT Lime Edition/Icons/icon (11).ico
-
njRAT Lime Edition/Icons/icon (12).ico
-
njRAT Lime Edition/Icons/icon (13).ico
-
njRAT Lime Edition/Icons/icon (2).ico
-
njRAT Lime Edition/Icons/icon (3).ico
-
njRAT Lime Edition/Icons/icon (4).ico
-
njRAT Lime Edition/Icons/icon (5).ico
-
njRAT Lime Edition/Icons/icon (6).ico
-
njRAT Lime Edition/Icons/icon (7).ico
-
njRAT Lime Edition/Icons/icon (8).ico
-
njRAT Lime Edition/Icons/icon (9).ico
-
njRAT Lime Edition/Mono.Cecil.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 303KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/NjRat Lime Edition 0.8.0.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.5MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/Plugin Compiler.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/Plugin/cam.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/Plugin/ch.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/Plugin/mic.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/Plugin/pass2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 912KB - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/Plugin/plg.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/Plugin/pw.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/Plugin/reactor.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/Plugin/sc2.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/Plugin/seed.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT Lime Edition/Support/Explain Functions.html
-
njRAT Lime Edition/Support/Help.html
-
njRAT Lime Edition/Support/Video/Setup.mp4
-
njRAT Lime Edition/Support/Video/TO.gif.gif
-
njRAT Lime Edition/Wallpaper/ransomware.jpg
-
njRAT Lime Edition/Wallpaper/wallpaper (1).jpg.jpg
-
njRAT Lime Edition/Wallpaper/wallpaper (2).jpg.jpg
-
njRAT Lime Edition/Wallpaper/wallpaper (3).jpg
-
njRAT Lime Edition/WinMM.Net.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ