MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 08:47:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add Parasite HTTP RAT

Browse source
This commit is contained in:
rmkml 2019-04-09 22:27:28 +02:00
parent f023795cd7
commit 6467fe5849
1 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
clusters/rat.json
View file

@ -3328,7 +3328,17 @@
}, },
"uuid": "1b6a067b-50b9-4aa7-a49b-823e94e210fe", "uuid": "1b6a067b-50b9-4aa7-a49b-823e94e210fe",
"value": "H-worm" "value": "H-worm"
},
{
"description": "The RAT, dubbed Parasite HTTP, is especially notable for the extensive array of techniques it incorporates for sandbox detection, anti-debugging, anti-emulation, and other protections. The malware is also modular in nature, allowing actors to add new capabilities as they become available or download additional modules post infection.",
"meta": {
"refs": [
"https://www.proofpoint.com/us/threat-insight/post/parasite-http-rat-cooks-stew-stealthy-tricks"
]
},
"uuid": "1b6a067c-50ba-4aa7-a59b-824e94e210fe",
"value": "Parasite-HTTP-RAT"
} }
], ],
"version": 26 "version": 27
} }