General

  • Target

    New-Client.exe

  • Size

    28KB

  • MD5

    0cdc2ae52c17aa3bbba1bdd58b7e9901

  • SHA1

    9e6c1b392536c34f1434c61dbd9684c52c7c834a

  • SHA256

    edf986f6d02ea68efcece9629ef76df6caeef2110cc5426f4dd1e61971259325

  • SHA512

    e07ee332542237760ca54531a50ecab20f789fac03e372672710ca792ab5b83f30dd0a08b50c98bb55586a3b9d80bc5c3de96b5e36e08aa1803d55c781dc448d

  • SSDEEP

    384:GB+Sbj6NK9506XbAHt6TiqDR82wijIPvDKNrCeJE3WNgS3uOf7s2oFcQro3lc7oo:8p9G6Xbwta8K0n45NoORosSj

Score
10/10

Malware Config

Extracted

Family

limerat

Attributes
  • aes_key

    tobikjenegr

  • antivm

    false

  • c2_url

    https://pastebin.com/raw/DDTVwwbu

  • delay

    3

  • download_payload

    false

  • install

    true

  • install_name

    fsds.exe

  • main_folder

    AppData

  • pin_spread

    true

  • sub_folder

    \fasdasfdfsdfsda\

  • usb_spread

    true

Signatures

  • Limerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New-Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections