limerat | f134177a5db90aa99be5563c19922490cfadfe634b0d094c9571142f5e527a64 | Triage

Sharing

General

Target

569ec7a2ae4392dd28bc696ce0bd415a
Size

88KB
Sample

231219-te6zlaacdj
MD5

569ec7a2ae4392dd28bc696ce0bd415a
SHA1

10f1a87d164bac7d7735ef7bb95b4aa9174a4f6b
SHA256

f134177a5db90aa99be5563c19922490cfadfe634b0d094c9571142f5e527a64
SHA512

441cc5f39dda2298db6aa5471d22021e6178380a15d501ad68c4c5f6b90683bb3fb4b2449ca87e746bfa56c0f7bf7accced77144f75485f393343866d4e3a670
SSDEEP

1536:egfkgq91KynfEaY5apfZFIHXmd2aqYJ2YB3Zd4yZaQkskgTwzcY9w6eiNZ60xM4y:eFvnIiFI3U3VAYpZjUQPTAeO6qKI/qF

Score

10^/10

limerat rat

Malware Config

Extracted

Family

limerat

Attributes

antivm
false
c2_url
https://pastebin.com/raw/v9J7B6vz
download_payload
false
install
false
pin_spread
false
usb_spread
false

Targets

- Target
  
  569ec7a2ae4392dd28bc696ce0bd415a
- Size
  
  88KB
- MD5
  
  569ec7a2ae4392dd28bc696ce0bd415a
- SHA1
  
  10f1a87d164bac7d7735ef7bb95b4aa9174a4f6b
- SHA256
  
  f134177a5db90aa99be5563c19922490cfadfe634b0d094c9571142f5e527a64
- SHA512
  
  441cc5f39dda2298db6aa5471d22021e6178380a15d501ad68c4c5f6b90683bb3fb4b2449ca87e746bfa56c0f7bf7accced77144f75485f393343866d4e3a670
- SSDEEP
  
  1536:egfkgq91KynfEaY5apfZFIHXmd2aqYJ2YB3Zd4yZaQkskgTwzcY9w6eiNZ60xM4y:eFvnIiFI3U3VAYpZjUQPTAeO6qKI/qF
Score

10^/10

limerat rat
- LimeRAT
  Simple yet powerful RAT for Windows machines written in .NET.
  rat limerat
- Executes dropped EXE
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2