Adwind
Description
(Proofpoint) The AlienSpy RAT is very powerful in the hands of an attacker. Some of the key features supported by the RAT include:
• Collection of system information for fingerprinting and displaying on the attacker’s controller dashboard • File system, process and registry explorer with ability to view and modify • Ability to run console commands • Keylogging to capture user inputs • Ability to download and execute secondary payloads • Credential theft from various browser stores • Ability to spy on victim through screenshots, webcam, microphone • Ability to RDP (Remote Desktop) to infected clients • Ability to mine various type of digital currency such as bitcoin, litecoin, dogecoin etc.
Names
| Name |
|---|
| Adwind |
| Adwind RAT |
| Frutas |
| jFrutas |
| UnReCoM |
| Alien Spy |
| AlienSpy |
| JSocket |
| Sockrat |
| jBiFrost |
| JBifrost RAT |
| Unknown RAT |
| jConnectPro RAT |
| Unrecom |
| Trojan.Maljava |
Category
Malware
Type
- Reconnaissance
- Backdoor
- Keylogger
- Credential stealer
- Info stealer
- Exfiltration
- Miner
Information
- https://www.proofpoint.com/us/threat-insight/post/You-Dirty-RAT
- https://unit42.paloaltonetworks.com/the-legend-of-adwind-a-commodity-rat-saga-in-eight-parts/
- https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07195002/KL_AdwindPublicReport_2016.pdf
Mitre Attack
Malpedia
Alienvault Otx
Other Information
Uuid
90747400-bb9d-427d-8cc3-cd341f598860
Last Card Change
2022-12-30