NomadRAT: Modular C++ RAT with Plugin Architecture
NomadRAT is a C++-based remote access tool featuring a main orchestrator and a dedicated transmitter library for C2 traffic. It fetches plugins…
Tag: C#
SilentRaid (MystRodX/TrustFall): Overlapping Infrastructure
SilentRaid, also known as MystRodX or TrustFall, is a C++-based implant linked to previous attacks. Kaspersky found infrastructure overlaps between this campaign…
BINDCLOAK: C++ C2 Implant
BINDCLOAK is a 64-bit C++ implant that contacts an external server for command-and-control. It is the final payload in the attack chain,…
MATCHBOIL.V2: C#-Based Loader Delivered via Fake Notepad++ Plugin
MATCHBOIL.V2 is a modified version of the MATCHBOIL malware, a C#-based loader capable of delivering secondary payloads. It was deployed in attacks…
SharpShares: Network Shares Enumeration Utility
SharpShares is a C#-based utility for enumerating network shares. It was used by the attacker to find user-accessible data repositories.