RomeoEcho

Description

(Novetta) A stark departure from the design pattern found in Romeo-CoreOne-base families, RomeoEcho is a RAT that uses a more interactive command shell format for command identification.

With the communications key established and the handshake complete, RomeoEcho’s core activates the communications loop function. RomeoEcho is single-threaded and does not spawn a new thread for incoming connections. As a result, only one client can access a RomeoEcho-infected node at a time.

Names

Name
RomeoEcho

Category

Malware

Type

  • Backdoor
  • Info stealer
  • Exfiltration

Information

Other Information

Uuid

bdfc3b30-4472-4f49-910b-cad0effb50f8

Last Card Change

2020-04-20