Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
New BotHelper RAT Lets Attackers Watch Windows Screens in Real Time
Excerpt
A newly analyzed Windows remote access trojan can stream a victim’s screen to an attacker while also running commands, downloading files and maintaining access after a restart. Point Wild Threat Intelligence calls the previously undocumented .NET malware BotHelper RAT, after a namespace found in its code. Its researchers observed the screen-streaming function during analysis; the other functions were identified in the malware’s command handler. The infection begins with a…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 0d41ce75da4f3404734358411a72ffc4169376dcfebda52ac50eb66eac73d2f6 | Medium | Score 53/100 | First seen |
| SHA256 | 8f39fe882e45dfa8a7446d59dfef86b583a868ff846ade86124a57041f5c63fd | Medium | Score 53/100 | First seen |
| Domain | easyllms.xyz | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…