SnakeDeveloperRAT
PO.exe custom .NET RAT. snakedeveloper@gmail.com IsmAvatar@gmail.com developer attribution emails. HotkeyScreenshot hotkey-triggered screenshot capture. AllowPartiallyTrustedCallers sandbox attribute. ZLIB.NET compression.
Threat Profile
Type
RAT
Programming LanguageC#/.NET
C2 ProtocolHTTP
First Seen2023
Targets
Küresel
Purpose / Capabilities
- Remote Access/Screenshot Capture
No C2 servers have been identified for this family yet.
Research Reports (1)
PO.exe SnakeDeveloperRAT -- snakedeveloper@gmail.com ve IsmAvatar@gmail.com Geliştirici E-posta, HotkeyScreenshot Hotkey Tetiklemeli Ekran Görüntüsü, AllowPartiallyTrustedCallers Sandbox Yetki Özelliği, ZLIB.NET Sıkıştırma | Orta
PO.exe 968KB .NET RAT. snakedeveloper@gmail.com IsmAvatar@gmail.com gelistirici eposta. HotkeyScreenshot hotkey tetiklemeli ekran goruntusu. AllowPartiallyTrustedCallers. ZLIB.NET sikistirma.
Read Report →