Abyssos Modular RAT Analysis
ID: 9b414ea5-10cf-5ce2-847f-60bc215c849b
STIX ID: report--9b414ea5-10cf-5ce2-847f-60bc215c849b
Feed Name: Zscaler Security Research Blog
Threat Score
A technical analysis of Abyssos v2.4F detailing its anti-analysis and LLVM-based obfuscation, initialization (mutex naming, API resolution), AES-GCM network protocol with hardcoded keys, a wide set of C2 commands (remote desktop/VNC, process management, file exfiltration, credential/cookie recovery, keylogging), and downloadable modules (some XOR- or AES-CBC-encrypted) used for credential collection and network scanning.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.