PowerShell RAT
Description
(Group-IB) PowerShell RAT functions: • Update configuration • Collect and send information about the infected PC and running processes with ability to ruminate them • Collect and send files to a remote server • Change properties and attributes of files • Supports operations with Registry • Supports operations for working with ZIP-archives • Download and run PowerShell scripts • Uploading files to an infected PC • Execute commands from a remote server in the command line interpreter
Names
| Name |
|---|
| PowerShell RAT |
Category
Malware
Type
- Reconnaissance
- Backdoor
- Info stealer
- Exfiltration
Information
Other Information
Uuid
32397efd-6471-4c55-8de3-35229e031e46
Last Card Change
2020-04-20