Cobian RAT – A backdoored RAT

Zscaler ThreatLabZ analyzes Cobian RAT, an njRAT-derived remote access trojan whose freely distributed builder contains a hidden backdoor allowing the original author to control bots created by downstream operators; the report documents sample unpacking, persistence, anti-debugging, network C2 protocol and commands, lists IOCs (MD5s, signed executable metadata, C2 domain/IP), and describes an observed in-the-wild infection.