Overview

overview

10

Static

static

10

Lime-Crypt...er.exe

windows7-x64

Lime-Crypt...er.exe

windows10-2004-x64

Lime-Crypt...er.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    RAT-main.zip

  • Size

    10.5MB

  • MD5

    822820513c7ca429a832d9beb0e9c32b

  • SHA1

    530ec3bd5f11ec5369edb748fe1bcbd16baa91da

  • SHA256

    38a3466f3c505ffa5b8b4547f152674bc92c25f03ec8d29c73e6544aecf3a514

  • SHA512

    729f8c747706d3b399a809333b64a0643885ceac3d86455a05bcb334fc83eba80540053f2ee27532afb2e13c403ac8488064f17a65002405e15386898ea865c0

  • SSDEEP

    196608:rUu8RudOhvYhuFpM+dCZratnQgADlF+xGz1Ma23b1txaITp:rUuou4vYhuJCZra1CDlL1Ma+1toITp

Score
10/10
ratzgratasyncratquasar

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    5000

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Detect ZGRat V1 13 IoCs
  • Quasar family
    quasar
  • Quasar payload 3 IoCs
  • Zgrat family
    zgrat
  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

Files

  • RAT-main.zip
    .zip
  • RAT-main/Async RAT.zip
    .zip
  • AsyncRAT/AsyncRAT.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • AsyncRAT/AsyncRAT.exe.config
    .xml
  • AsyncRAT/Plugins/Chat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/Extra.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/FileManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/FileSearcher.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/LimeLogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/Miscellaneous.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/Options.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/ProcessManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/Recovery.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/RemoteCamera.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/RemoteDesktop.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/SendFile.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Plugins/SendMemory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • AsyncRAT/Stub/Stub.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • RAT-main/Lime-Crypter.zip
    .zip
  • Lime-Crypter-master/.gitattributes
  • Lime-Crypter-master/.gitignore
  • Lime-Crypter-master/.vs/Lime-Crypter/FileContentIndex/7d065218-6cfe-4906-8ba2-ccb045ea7978.vsidx
  • Lime-Crypter-master/.vs/Lime-Crypter/v17/.suo
  • Lime-Crypter-master/.vs/Lime-Crypter/v17/.wsuo
  • Lime-Crypter-master/.vs/Lime-Crypter/v17/DocumentLayout.json
  • Lime-Crypter-master/LICENSE
  • Lime-Crypter-master/Lime-Crypter.sln
  • Lime-Crypter-master/Lime-Crypter/App.config
    .xml
  • Lime-Crypter-master/Lime-Crypter/Build/SetupBuild.cs
    .js
  • Lime-Crypter-master/Lime-Crypter/Forms/Form1.Designer.cs
  • Lime-Crypter-master/Lime-Crypter/Forms/Form1.cs
    .js
  • Lime-Crypter-master/Lime-Crypter/Forms/Form1.resx
    .vbs
  • Lime-Crypter-master/Lime-Crypter/Forms/FormChangeIcon.Designer.cs
  • Lime-Crypter-master/Lime-Crypter/Forms/FormChangeIcon.cs
  • Lime-Crypter-master/Lime-Crypter/Forms/FormChangeIcon.resx
    .vbs
  • Lime-Crypter-master/Lime-Crypter/Forms/FormInformation.Designer.cs
  • Lime-Crypter-master/Lime-Crypter/Forms/FormInformation.cs
    .js
  • Lime-Crypter-master/Lime-Crypter/Forms/FormInformation.resx
    .vbs
  • Lime-Crypter-master/Lime-Crypter/Lime-Crypter.csproj
  • Lime-Crypter-master/Lime-Crypter/Program.cs
  • Lime-Crypter-master/Lime-Crypter/Properties/AssemblyInfo.cs
  • Lime-Crypter-master/Lime-Crypter/Properties/Resources.Designer.cs
    .vbs
  • Lime-Crypter-master/Lime-Crypter/Properties/Resources.resx
    .vbs
  • Lime-Crypter-master/Lime-Crypter/Properties/Settings.Designer.cs
  • Lime-Crypter-master/Lime-Crypter/Properties/Settings.settings
  • Lime-Crypter-master/Lime-Crypter/Resources/Loader.cs
    .js
  • Lime-Crypter-master/Lime-Crypter/Resources/Stub.cs
    .js
  • Lime-Crypter-master/Lime-Crypter/Util/PremadeFileInfo.cs
  • Lime-Crypter-master/Lime-Crypter/Util/RandomCharacters.cs
    .js
  • Lime-Crypter-master/Lime-Crypter/Util/RandomFileInfo.cs
    .js
  • Lime-Crypter-master/Lime-Crypter/app.manifest
  • Lime-Crypter-master/Lime-Crypter/bin/Debug/Lime-Crypter.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Lime-Crypter-master/Lime-Crypter/bin/Debug/Lime-Crypter.exe.config
    .xml
  • Lime-Crypter-master/Lime-Crypter/bin/Debug/Lime-Crypter.pdb
  • Lime-Crypter-master/Lime-Crypter/me.ico
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/.NETFramework,Version=v4.6.AssemblyAttributes.cs
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/Lime-Crypter.csproj.AssemblyReference.cache
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/Lime-Crypter.csproj.CoreCompileInputs.cache
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/Lime-Crypter.csproj.FileListAbsolute.txt
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/Lime-Crypter.csproj.GenerateResource.cache
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/Lime-Crypter.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Lime-Crypter-master/Lime-Crypter/obj/Debug/Lime-Crypter.pdb
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/Lime_Crypter.Forms.Form1.resources
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/Lime_Crypter.Forms.FormChangeIcon.resources
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/Lime_Crypter.Forms.FormInformation.resources
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/Lime_Crypter.Properties.Resources.resources
    .js
  • Lime-Crypter-master/Lime-Crypter/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Lime-Crypter-master/Lime-Crypter/obj/Release/.NETFramework,Version=v4.6.AssemblyAttributes.cs
  • Lime-Crypter-master/Lime-Crypter/obj/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
  • Lime-Crypter-master/Lime-Crypter/obj/Release/Lime-Crypter.csproj.AssemblyReference.cache
  • Lime-Crypter-master/README.md
  • Lime-Crypter-master/limecrypter.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • RAT-main/Quasar.v1.4.1.zip
    .zip
  • Quasar v1.4.1/3rdPartyLicenses/Be.HexEditor_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/BouncyCastle_license.html
    .html
  • Quasar v1.4.1/3rdPartyLicenses/GlobalMouseKeyHook_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/Mono.Cecil_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/Open.Nat_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/ResourceLib_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/SilkIcons_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/protobuf-net_license.txt
  • Quasar v1.4.1/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Quasar v1.4.1/Gma.System.MouseKeyHook.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/LICENSE
  • Quasar v1.4.1/Mono.Cecil.Mdb.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Mono.Cecil.Pdb.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Mono.Cecil.Rocks.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Mono.Cecil.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Open.Nat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Quasar.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Quasar.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Quasar.exe.config
    .xml
  • Quasar v1.4.1/Vestris.ResourceLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/client.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Quasar v1.4.1/protobuf-net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections