26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 53:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4aa,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious MSIL.LimeRAT.Generic Sample b29cf2fc83f2… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample b29cf2fc83f2…. Malware family: MSIL.LimeRAT.Generic. Threat score 100/100. 20/27 AV engines flagged this file. 12 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11","keywords":["Malicious","MSIL.LimeRAT.Generic","malware analysis","sandbox report","threat intelligence","b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11"],"about":{"@type":"SoftwareApplication","name":"detail.exe","applicationCategory":["peexe","assembly","executable"],"identifier":"b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"MSIL.LimeRAT.Generic","antivirusDetections":{"malicious":20,"total":27},"behavioralIndicators":{"malicious":12,"suspicious":15},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T58e,Observed namespace "System.IO.MemoryStream" and TypeReference ".ctor" in "b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11.bin" Observed namespace "System.IO.MemoryStream" and TypeReference "Write" in "b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11.bin" Observed namespace "System.IO.MemoryStream" and TypeReference "ToArray" in "b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11.bin" Observed namespace "System.IO.MemoryStream" and TypeReference "set_Position" in "b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11.bin" Observed namespace "System.IO.MemoryStream" and TypeReference "get_Length" in "b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11.bin" Observed namespace "System.IO.MemoryStream" and TypeReference "Read" in "b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11.bin" Observed namespace "System.IO.MemoryStream" and TypeReference ".ctor" in "hu88999.exe" Observed namespace "System.IO.MemoryStream" and TypeReference "Write" in "hu88999.exe" Observed namespace "System.IO.MemoryStream" and TypeReference "ToArray" in "hu88999.exe" Observed namespace "System.IO.MemoryStream" and TypeReference "set_Position" in "hu88999.exe" Observed namespace "System.IO.MemoryStream" and TypeReference "get_Length" in "hu88999.exe" Observed namespace "System.IO.MemoryStream" and TypeReference "Read" in "hu88999.exe"28:T8da,Found reference to "RijndaelManaged" (Indicator: "Rijndael"; File: "b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11.bin") Found reference to "RijndaelManaged" (Indicator: "RijndaelManaged"; File: "b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11.bin") Found reference to "SymmetricAlgorithm" (Indicator: "SymmetricAlgorithm"; File: "b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11.bin") Found reference to "HashAlgorithm" (Indicator: "HashAlgorithm"; File: "b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11.bin") Found reference to "MD5CryptoServiceProvider" (Indicator: "MD5CryptoServiceProvider"; File: "b29cf2fc83f2c5871baf6d54b9593dec38a09208818482ec5f94947745ca7f11.bin") file/memory contains long string with (Indicator: "HashAlgorithm"; File: "hu88999.exe") file/memory contains long string with (Indicator: "MD5CryptoServiceProvider"; File: "hu88999.exe") file/memory contains long string with (Indicator: "Rijndael"; File: "hu88999.exe") file/memory contains long string with (Indicator: "RijndaelManaged"; File: "hu88999.exe") file/memory contains long string with (Indicator: "SymmetricAlgorithm"; File: "hu88999.exe") Found reference to "RijndaelManaged" (Indicator: "Rijndael"; Source: "00000000-00004308.00000000.148178.00F02000.00000002.mdmp") Found reference to "RijndaelManaged" (Indicator: "RijndaelManaged"; Source: "00000000-00004308.00000000.148178.00F02000.00000002.mdmp") Found reference to "SymmetricAlgorithm" (Indicator: "SymmetricAlgorithm"; Source: "00000000-00004308.00000000.148178.00F02000.00000002.mdmp") Found reference to "HashAlgorithm" (Indicator: "HashAlgorithm"; Source: "00000000-00004308.00000000.148178.00F02000.00000002.mdmp") Found reference to "MD5CryptoServiceProvider" (Indicator: "MD5CryptoServiceProvider"; Source: "00000000-00004308.00000000.148178.00F02000.00000002.mdmp") Found reference to "SA/SHA384" (Indicator: "SHA384"; Source: "00000000-00004308.00000001.150097.08FEC000.00000004.mdmp, 00000000-00004308.00000002.152018.08FD0000.00000004.mdmp") file/memory contains long string with (Indicator: "RC2"; Source: "00000000-00004308.00000001.150097.09C4E000.00000004.mdmp, 00000000-00004308.00000002.152018.09C42000.00000004.mdmp")29:T8e8,"" (Indicator: "enumchildwindows"; Source: "00000000-00004308.00000000.148178.034A0000.00000004.mdmp, 00000000-00004308.00000001.150097.034A0000.00000004.mdmp, 00000000-00004308.00000002.152018.034A0000.00000004.mdmp") Found reference to API "i HU88.com!">