Content available in original language
class="post-article">
RAT .NET/C# Active since 2021

ResolverRAT

ResolverRAT, 2021 yilinda saglik ve eczacilik sektorunu hedefleyen .NET tabanli bir RAT ailesidir. DLL side-loading, HTTPS C2, bellek icinde calistirma (fileless) ve Donut shellcode ile dagitim kullanir.

Threat Profile
Type RAT
Programming Language.NET/C#
C2 ProtocolHTTPS
First Seen2021
Targets Saglik/Eczacilik Sektoru
Purpose / Capabilities
  • Remote Access/Data Exfil
No C2 servers have been identified for this family yet.

Research Reports (1)

Yüksek

ResolverRAT — Donut Shellcode Cozumlenmis .NET Payload, RC4 Benzeri Obfuske Anahtarlar | Yuksek

ResolverRAT donut_decrypted_netexe.bin. Donut shellcode ile sarmalanmis .NET payload, RC4 benzeri obfuske string anahtarlar.

Read Report →