MysterySnail RAT
Description
(Kaspersky) Our deep dive into the MysterySnail RAT family started with an analysis of a previously unknown remote shell-type Trojan that was intended to be executed by an elevation of privilege exploit. The sample which we analyzed was also uploaded to VT on August 10, 2021. The sample is very big – 8.29MB. One of the reasons for the file size is that it’s statically compiled with the OpenSSL library and contains unused code and data belonging to that library. But the main reason for its size is the presence of two very large functions that do nothing but waste processor clock cycles. These functions also “use” randomly generated strings that are also present in a binary.
Names
| Name |
|---|
| MysterySnail RAT |
| MysterySnail |
Category
Malware
Type
- Backdoor
- Info stealer
- Exfiltration
Information
Malpedia
Other Information
Uuid
582092bf-4d53-40c0-bb80-c7c1508127b2
Last Card Change
2022-12-28