General
- Target New-Client.exe
- Size 28KB
- Sample240530-3wp7vaeh9t
- SHA256 ce492124cd1c9737f21aaabc10a0f01aa073585d380446c766a7e99e11bba72e
- MD5 7c86eee669ea7407b4dff1a26176df4f
- SHA1 11bdf6410159fc32a232641e5b8470f8ec6ccb1b
- SHA512 077081dc3ba1ebe84f3994730942fe126d994231260c2f1bcdc8990c61423a0e818c8457567d7c698357c77cb1e49f6f7d910b18ca6ab2e8ffefc806ce4bed20
- SSDEEP 768:ZpWM61lwdssZKB/45NPFH6koNjDb6ygj:ZpqlwdtcBQBH6koBDb6d
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
limerat
Attributes
-
aes_key
0790308
-
antivm
false
-
c2_url
https://pastebin.com/raw/ug38C3Hv
-
delay
3
-
download_payload
false
-
install
false
-
install_name
Wservices.exe
-
main_folder
Temp
-
pin_spread
false
-
sub_folder
\
-
usb_spread
false
Extracted
Family
-
limerat
Attributes
-
antivm
false
-
c2_url
https://pastebin.com/raw/ug38C3Hv
-
download_payload
false
-
install
false
-
pin_spread
false
-
usb_spread
false
Targets
-
- Target New-Client.exe
- Size 28KB
- SHA256 ce492124cd1c9737f21aaabc10a0f01aa073585d380446c766a7e99e11bba72e
- MD5 7c86eee669ea7407b4dff1a26176df4f
- SHA1 11bdf6410159fc32a232641e5b8470f8ec6ccb1b
- SHA512 077081dc3ba1ebe84f3994730942fe126d994231260c2f1bcdc8990c61423a0e818c8457567d7c698357c77cb1e49f6f7d910b18ca6ab2e8ffefc806ce4bed20
- SSDEEP 768:ZpWM61lwdssZKB/45NPFH6koNjDb6ygj:ZpqlwdtcBQBH6koBDb6d
- MD5 SHA1 SHA512 SSDEEP
-
Legitimate hosting services abused for malware hosting/C2