Simple yet powerful malware which targeting Windows OS for educational purposes. This project is uncomplicated and easy to do or understand , targeting entry level developers, It should improve your knowledge and study for malware analysis and malware research.

• .NET - Coded in Visual Basic .NET, Client required framework 2.0 dependency, And server is 4.0

• Connection - Using pastebin.com RAW as ip:port , Instead of noip.com DNS

• Encryption - The communication between server & client is encrypted with AES

• Spreading - Infecting all files and folders on USB drivers , Also spread over pinned applications on taskbar

• Bypass - Low AV detection and undetected startup

• Lightweight - About 27 KB

• Anti Virtual Machines - Uninstall itself if the machine is virtual to avoid scanning or analyzing

• And more - Ransomware , passwords recovery , RDP , Bitcoin grabber , Downloader , Keylogger

To open project you need:

1- Visual Studio 2017+

2- This repository

1. Open "LimeRAT.sln"
2. Set Compiler to "Debug" mode
3. On Solution Explorer, Right click on "Solution LimeRAT Project" and press "Rebuild Solution"
4. Press Run button. be aware that both client and server are localhost

1. Open "LimeRAT.sln"
2. Set Compiler to "Release" mode
3. On Solution Explorer, Right click on "Solution LimeRAT Project" and press "Rebuild Solution"
4. Everything will be under "\Project_EXE\Release"

This project was tested only on local lab. I do not know if it will work on external lab.
Server tested on Windows 10, Client tested on virtual machine windows 7, on the same LAN.

1. While using ransomware, restore point won't be deleted unless you are running elevated privilege

Found an issue? report it here https://github.com/NYAN-x-CAT/Lime-RAT/issues/new

• NYAN CAT

I, the creator, am not responsible for any actions, and or damages, caused by this software.

You bear the full responsibility of your actions and acknowledge that this software was created for educational purposes only.

This software's main purpose is NOT to be used maliciously, or on any system that you do not own, or have the right to use.

By using this software, you automatically agree to the above.

This project is licensed under the MIT License - see the LICENSE file for details