内容仅以原始语言提供
class="post-article">

GoRAT

Go-based AsyncClientRAT. writeKeyLog TLS session key logging. victim string. WriteProcessMemory SetThreadContext process injection. CryptUnprotectData PFXImportCertStore credential theft. CreateServiceW persistence. SMB/DNS lateral movement.

威胁档案
类型 RAT
编程语言Go
C2协议TLS/HTTPS
首次发现2023
目标 Küresel
用途 / 能力
  • Remote Access/Credential Theft/Lateral Movement
尚未发现该家族的 C2 服务器。

研究报告 (1)

Kritik

AsyncClientGoRAT -- writeKeyLog KeyLogWriter TLS Oturum Anahtarı Kaydı, victim Kurban Takip Stringi, WriteProcessMemory SetThreadContext Proses Enjeksiyonu, CryptUnprotectData PFXImportCertStore Kimlik Çalma | Kritik

Go tabanlı AsyncClient.exe 4MB RAT. writeKeyLog KeyLogWriter TLS oturum anahtari kaydedici. victim kurban takip stringi. WriteProcessMemory SetThreadContext proses enjeksiyonu. CryptUnprotectData PFXImportCertStore kimlik calma.

阅读报告 →