24:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/3fc9w1ah_nm2g.js"],"SampleDetailWrapper"] 34:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/1f7k-b47qno-6.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4f0,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious AsyncRAT.Marte.B.Generic Sample 42364d1b17f2… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 42364d1b17f2…. Malware family: AsyncRAT.Marte.B.Generic. Threat score 100/100. 17/27 AV engines flagged this file. 4 malicious and 9 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd","keywords":["Malicious","AsyncRAT.Marte.B.Generic","malware analysis","sandbox report","threat intelligence","42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd"],"about":{"@type":"SoftwareApplication","name":"42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin","applicationCategory":["peexe","assembly","executable"],"identifier":"42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"AsyncRAT.Marte.B.Generic","antivirusDetections":{"malicious":17,"total":27},"behavioralIndicators":{"malicious":4,"suspicious":9},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T1025,Found reference to "HMACSHA256" (Indicator: "HMAC"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "HMACSHA256" (Indicator: "HMACSHA256"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "Aes256" (Indicator: "Aes"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "SHA256Managed" (Indicator: "SHA256Managed"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "CryptoStreamMode" (Indicator: "CryptoStream"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "CryptoConfig" (Indicator: "CryptoConfig"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "CryptoStream" (Indicator: "CryptoStream"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "SymmetricAlgorithm" (Indicator: "SymmetricAlgorithm"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "AsymmetricAlgorithm" (Indicator: "AsymmetricAlgorithm"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "HashAlgorithm" (Indicator: "HashAlgorithm"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "CryptographicException" (Indicator: "CryptographicException"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "MD5CryptoServiceProvider" (Indicator: "MD5CryptoServiceProvider"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "RSACryptoServiceProvider" (Indicator: "RSACryptoServiceProvider"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "AesCryptoServiceProvider" (Indicator: "Aes"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "AesCryptoServiceProvider" (Indicator: "AesCryptoServiceProvider"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "Rfc2898DeriveBytes" (Indicator: "DeriveBytes"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "Rfc2898DeriveBytes" (Indicator: "Rfc2898DeriveBytes"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to "HMACSHA256" (Indicator: "HMAC"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to "HMACSHA256" (Indicator: "HMACSHA256"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to "Aes256" (Indicator: "Aes"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to "SHA256Managed" (Indicator: "SHA256Managed"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to "CryptoStreamMode" (Indicator: "CryptoStream"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to "CryptoConfig" (Indicator: "CryptoConfig"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to "CryptoStream" (Indicator: "CryptoStream"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to "SymmetricAlgorithm" (Indicator: "SymmetricAlgorithm"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to "AsymmetricAlgorithm" (Indicator: "AsymmetricAlgorithm"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to "HashAlgorithm" (Indicator: "HashAlgorithm"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to "CryptographicException" (Indicator: "CryptographicException"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to "MD5CryptoServiceProvider" (Indicator: "MD5CryptoServiceProvider"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp")26:T4ca,The analysis contains indicators for crypto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains ability to use Cryptographic classes Matched sigs: Contains CRYPTO related strings Matched sigs: Contains ability to decode base64 data Matched sigs: Contains ability to perform encryption/decryption using RSA algorithm Matched sigs: Able to decrypt/decode data Matched sigs: Contains ability to decrypt data using RSA (Dotnet String) Matched sigs: Contains ability to encrypt data using RSA (Dotnet String) Matched sigs: Contains ability to perform AES decryption (Dotnet String) Matched sigs: Reads the cryptographic machine GUID Matched sigs: Contains ability to perform crypto operations Matched sigs: Able to decode string content at runtime (.NET) Matched sigs: Contains ability to perform asymmetric crypto operations Matched sigs: Contains ability to perform symmetric crypto operations Matched sigs: Contains ability to perform symmetric encryption (Dotnet) Matched sigs: Contains ability to perform CryptoStream operations (Dotnet) Matched sigs: Contains symmetric decryption functionality in .NET code Matched sigs: Dotnet file contains encryption/decryption functions27:T4b4,Found reference to API "GetActiveWindowTitle" (Indicator: "GetActiveWindowTitle"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to API "GetActiveWindowTitle" (Indicator: "GetActiveWindow"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to API "GetWindowText" (Indicator: "GetWindowText"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to API "GetForegroundWindow" (Indicator: "GetForegroundWindow"; File: "42364d1b17f20b54806f6de76aa89df1f9ebb7587a1cb1bd9ea75983fac0c4fd.bin") Found reference to API "GetActiveWindowTitle" (Indicator: "GetActiveWindowTitle"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to API "GetActiveWindowTitle" (Indicator: "GetActiveWindow"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to API "GetWindowText" (Indicator: "GetWindowText"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp") Found reference to API "GetForegroundWindow" (Indicator: "GetForegroundWindow"; Source: "00000000-00002552.00000003.175278.00322000.00000002.mdmp")28:T2692,"