Extracted

• • Target

    IDM Crack ver_rar.scr

  • Size

    374KB

  • MD5

    fb829a18b62699e01513a237707de26f

  • SHA1

    b52801a885e81570724c681f639aba188e3241e2

  • SHA256

    c80bc3e65ac5ef54a14ccd38165fdce161ca5caae8c2c0dbc17deb7134b177f2

  • SHA512

    1fe630ae89e02243e2a595129c8763fbb1063491ee11c8ce7819eb37e88dc2fbf5ee6a780099341da8c75510131745db67a56cf6548e05096200cdeb001b9388

  • SSDEEP

    6144:kcxBAVFqZOt58d2cBbz0tcyVPeqPRgetQjQCItnWUTusvy00uWiqNCf:L/AViOn84cBv0XWiQjQCItn/ouW9C

  Score

  10^/10

  limeratdiscoverypersistencerat

  • LimeRAT

    Simple yet powerful RAT for Windows machines written in .NET.

    ratlimerat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2behavioral3behavioral4