Protux
Description
(Trend Micro) Protux, a known backdoor, is executed by abusing the rundll32 dynamic-link library (DLL). It tests the host’s network, retrieves the C&C server from another blog, and uses the RSA algorithm to generate the session key and send information to the C&C server.
Names
| Name |
|---|
| Protux |
Category
Malware
Type
- Backdoor
Information
Alienvault Otx
Other Information
Uuid
29ff8d7b-f399-4ef8-b8de-e9fa6bcd8cc0
Last Card Change
2020-04-20