limerat | 28f934d0bbd26fbd1755bd03bce10d69f031b79eafffc76b20ec614940c33902 | Triage

Sharing

General

Target

43579219a247f11929666057f045882a
Size

298KB
Sample

240105-ljgw9saad5
MD5

43579219a247f11929666057f045882a
SHA1

47726a9fbc0f8d2e3f7731cbe1b58d8deff380d0
SHA256

28f934d0bbd26fbd1755bd03bce10d69f031b79eafffc76b20ec614940c33902
SHA512

ef8531696264efb91a45a4423fe68382fb82dfae81c20393d8bbce9ca6a9df0e6823c21721db04d273eb77a5937e2c65010dacb5beee87c98c416b2cdc359546
SSDEEP

384:7B+Sbj6NKABm6tdAHa1cXqDqKNq73MvDKNrCeJE3WNgqW2VYqo2ASQro3lcEOsjD:lpAs6tdwamiqri45Nn/F/jEAdKPhX

Score

10^/10

limerat rat

Malware Config

Extracted

Family

limerat

Attributes

aes_key
Salted__¤Cxp•º×^¼i»%bfŽð9ÈœÉo
antivm
true
c2_url
https://pastebin.com/raw/jJYQvYwp
delay
3
download_payload
false
install
true
install_name
Synapse X.exe
main_folder
AppData
pin_spread
true
sub_folder
\WindowsSys\
usb_spread
true

Targets

- Target
  
  43579219a247f11929666057f045882a
- Size
  
  298KB
- MD5
  
  43579219a247f11929666057f045882a
- SHA1
  
  47726a9fbc0f8d2e3f7731cbe1b58d8deff380d0
- SHA256
  
  28f934d0bbd26fbd1755bd03bce10d69f031b79eafffc76b20ec614940c33902
- SHA512
  
  ef8531696264efb91a45a4423fe68382fb82dfae81c20393d8bbce9ca6a9df0e6823c21721db04d273eb77a5937e2c65010dacb5beee87c98c416b2cdc359546
- SSDEEP
  
  384:7B+Sbj6NKABm6tdAHa1cXqDqKNq73MvDKNrCeJE3WNgqW2VYqo2ASQro3lcEOsjD:lpAs6tdwamiqri45Nn/F/jEAdKPhX
Score

10^/10

limerat rat
- LimeRAT
  Simple yet powerful RAT for Windows machines written in .NET.
  rat limerat
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2