Python RAT with a Nice Screensharing Feature - SANS Internet Storm Center
Tags
| country: | Singapore |
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 37f30126-abc0-4deb-a851-2a0ce78f47f2 |
| Fingerprint | 54e9ddd12007bfb9 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Nov. 5, 2024, midnight |
| Added to db | Nov. 5, 2024, 10:42 a.m. |
| Last updated | Nov. 17, 2024, 7:44 p.m. |
| Headline | Internet Storm Center |
| Title | Python RAT with a Nice Screensharing Feature - SANS Internet Storm Center |
| Detected Hints/Tags/Attributes | 20/2/13 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://isc.sans.edu/diary/rss/31414 |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 142 | ✔ | SANS Internet Storm Center, InfoCON: green | https://isc.sans.edu/rssfeed_full.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 6 | self.host |
|
| Details | Domain | 4127 | github.com |
|
| Details | Domain | 43 | pypi.org |
|
| Details | Domain | 154 | youtu.be |
|
| Details | File | 19 | client.py |
|
| Details | Github username | 1 | fzgbzuw412 |
|
| Details | sha256 | 2 | 1281b7184278f2a4814b245b48256da32a6348b317b83c440008849a16682ccb |
|
| Details | IPv4 | 1 | 192.168.131.205 |
|
| Details | IPv4 | 1 | 192.168.131.202 |
|
| Details | Url | 1 | https://github.com/fzgbzuw412/python-rat/tree/main |
|
| Details | Url | 1 | https://www.virustotal.com/gui/file/1281b7184278f2a4814b245b48256da32a6348b317b83c440008849a16682ccb |
|
| Details | Url | 1 | https://pypi.org/project/vidstream |
|
| Details | Url | 1 | https://youtu.be/frus7gumlts |