内容仅以原始语言提供
class="post-article">
RAT Proprietary 自2024年起活跃

ScreenConnect

ScreenConnect ConnectWise meşru RMM araç kötüye kullanımı. invitedGuests.bat. BAT dropper + MSI kurulum.

威胁档案
类型 RAT
编程语言Proprietary
C2协议HTTPS
首次发现2024
目标 Küresel Kurumsal
用途 / 能力
  • Remote Access (RMM Abuse)

C2服务器 2

地址 端口 协议 状态 操作
hbdhfijnsgjnds.top
443 HTTPS INACTIVE
hbdhfijnsgjnds.top
443 HTTPS INACTIVE

⚠ C2 地址仅用于威胁情报和防御目的。未经授权访问这些地址属于违法行为。

研究报告 (2)

Orta

ScreenConnect Abuse -- invitedGuests.bat hbdhfijnsgjnds.top C2, Yasal RMM Aracı Kötüye Kullanımı | Orta

ScreenConnect 1KB invitedGuests.bat davet listesi. hbdhfijnsgjnds.top DGA C2. ConnectWise meşru RMM araç kötüye kullanim.

阅读报告 →
Yüksek

ScreenConnect/ConnectWise -- 1052 Byte invitedGuests.bat, hbdhfijnsgjnds.top .top C2 | Yüksek

ConnectWise RAT abuse 1052 byte. invitedGuests.bat admin.hbdhfijnsgjnds.top ScreenConnect.ClientSetup.msi indirme.

阅读报告 →