RATs of Unusual Sizes | Malwarebytes Labs
Tags
country: France Iran Israel
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Exploits - T1587.004 Exploits - T1588.005 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Visual Basic - T1059.005 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID 58153b28-b638-4664-b5fe-24732711edcf
Fingerprint 9b04105e2b6f34db
Analysis status DONE
Considered CTI value 0
Text language
Published June 1, 2012, midnight
Added to db Jan. 18, 2023, 8:35 p.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline RATs of Unusual Sizes
Title RATs of Unusual Sizes | Malwarebytes Labs
Detected Hints/Tags/Attributes 75/2/27
Source URLs
Redirection Url
Details Source https://blog.malwarebytes.com/threat-analysis/2012/06/rats-of-unusual-sizes/
URL Provider
Details Provider Source level domain
Details malwarebytes.com blog.malwarebytes.com
Attributes
Details Type #Events CTI Value
Details Domain 101 
www.theregister.co.uk
Details Domain 1 
airdemon.net
Details Domain 45 
www.securelist.com
Details Domain 17 
www.crysys.hu
Details Domain 9 
go.eset.com
Details Domain 2 
hbgary.com
Details Domain 397 
www.microsoft.com
Details Domain 1 
www.darkcomet-rat.com
Details Domain 1 
www.airdemon.net
Details File 5 
skywiper.pdf
Details File 4 
stuxnet_under_the_microscope.pdf
Details File 1 
detectingpoisonivy.pdf
Details File 38 
details.aspx
Details File 1 
the-israeli-institute-for-national-security-studies-lead-to-a-posionivy-infection-flow.aspx
Details File 66 
www.ai
Details File 1 
blackshades2.html
Details Url 1 
http://www.theregister.co.uk/2012/06/01/stuxnet_joint_us_israeli_op
Details Url 1 
http://www.securelist.com/en/blog/208193522/the_flame_questions_and_answers
Details Url 1 
http://www.crysys.hu/skywiper/skywiper.pdf
Details Url 1 
http://www.securelist.com/en/blog/208193182/the_mystery_of_duqu_part_one
Details Url 1 
http://go.eset.com/us/resources/white-papers/stuxnet_under_the_microscope.pdf
Details Url 1 
http://hbgary.com/attachments/detectingpoisonivy.pdf
Details Url 1 
http://www.microsoft.com/en-us/download/details.aspx?id=27871
Details Url 1 
http://news.techworld.com/security/3314804/hackers-used-poison-ivy-malware-to-steal-chemical-defense-secrets
Details Url 1 
http://community.websense.com/blogs/securitylabs/archive/2012/05/02/the-israeli-institute-for-national-security-studies-lead-to-a-posionivy-infection-flow.aspx
Details Url 1 
http://www.darkcomet-rat.com/home.dc
Details Url 1 
http://www.airdemon.net/blackshades2.html