Setting up Cerberus RAT(Remote Administration tool)
Tags
| attack-pattern: | Active Setup - T1547.014 Dns - T1071.004 Dns - T1590.002 Server - T1583.004 Server - T1584.004 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 6c5355ef-032c-40b3-b9f3-482a5071cfd2 |
| Fingerprint | e058b7d9fd26be35 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | May 5, 2011, 7:42 p.m. |
| Added to db | Sept. 26, 2022, 9:33 a.m. |
| Last updated | Oct. 1, 2024, 2:31 p.m. |
| Headline | HackToHell |
| Title | Setting up Cerberus RAT(Remote Administration tool) |
| Detected Hints/Tags/Attributes | 22/1/13 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | http://www.hacktohell.org/2011/05/setting-up-cerberus-ratremote.html |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 2 | www.no-ip.com |
|
| Details | Domain | 1 | www.dyndns.com |
|
| Details | Domain | 4 | dyndns.org |
|
| Details | Domain | 3 | portforward.com |
|
| Details | File | 1 | cerberus.rar |
|
| Details | File | 1 | cerberus.exe |
|
| Details | File | 2 | dws.exe |
|
| Details | File | 1 | misc.opt |
|
| Details | File | 1 | database.dat |
|
| Details | File | 1 | config.cer |
|
| Details | Url | 1 | http://www.no-ip.com |
|
| Details | Url | 1 | http://www.dyndns.com |
|
| Details | Url | 1 | http://portforward.com |