Roland

Description

(Cylance) Roland arrives as an un-obfuscated Win32 PE DLL. This particular version has been packaged to resemble a legitimate DLL, and contains a custom C2 protocol supporting a range of file, registry, process and memory operations, as well as a reverse shell, FTP file uploads, and retrieving system/user information.

Names

Name
Roland
Roland RAT

Category

Malware

Type

  • Reconnaissance
  • Backdoor
  • Info stealer
  • Exfiltration

Information

Other Information

Uuid

8ae6858b-a935-4e49-8cf0-8be23f0ec106

Last Card Change

2020-04-20