|
|
NetSlayer RAT Information
| Name: |
NetSlayer |
| Category: |
RAT |
| Alias: |
- Alias: Backdoor.NetDemon.10 |
| Advice: |
Remove |
| Risk: |
Severe Risk
Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine. |
| Description:
|
NetSlayer is a piece of software that allows an attacker to control a remote computer with the NetSlayer client installed over the Internet.
The victim computer with the NetSlayer client software installed listens on port 11/TCP over the Internet waiting for the attacker commands. The attacker can perform any one of the following actions on the client computer without the user’s consent or the ability for the user to stop it; move the mouse, send a message, execute a batch file, open windows, send keys, and shell any program.
|
| Signatures:
|
process: client.exe: MD5 Hash: 1debf67f39c2e617725...
process: server.exe: MD5 Hash: 7a755ec13e036f8202c...
process: unpacked server.exe: MD5 Hash: f00dfa9639c3f4d1fa6...
process: nspatch.exe: MD5 Hash: ...
process: NSPatch.exe: MD5 Hash: .. |
| Type: |
RAT - A Trojan software is any software on a user's computer that the user is not aware or intentionally installed. Most Trojan software is designed to perform some sort of actions that could jeopardize the user's security or privacy. |
Top RAT Visited Pages:
SubSeven - Alias: BackDoor-G22, BackDoor-Sub7 - 295 visits
NetBus v.1.70 - 210 visits
The Prayer - Alias: BackDoor-DI, Backdoor.Prayer.15 - 75 visits
Cyrex msn trojan - Alias: BackDoor-AOB, Backdoor.VB.dm, Backdoor.VB.dm, Cyrex msn trojan, W32/Delf.B - 69 visits
Global Killer - Alias: Backdoor.GlobalKiller 1.0, Global Killer 1.0 - 55 visits
Systray BackDoor - 53 visits
AutoSpY - Alias: Backdoor.AutoSpy - 49 visits
Secret Agent - Alias: Backdoor.Antinuke.10, Secret Agent 1.0 - 47 visits
Undetected - Alias: Backdoor.tds.4f, Backdoor.tds.se.23, Backdoor.tds.se.23a, Backdoor.tds.se.30, Backdoor.TDS.SE.31, Ba - 42 visits
Netbus - Alias: Backdoor.Netbus - 42 visits
Random RAT Pages:
H2000 - Alias: Backdoor.Mnets
Neoturk - Alias: BackDoor-AKG trojan, Backdoor.Neodurk.10, Backdoor.Neodurk.13 , Backdoor.Neoturk.14
DarkFace - Alias: BackDoor-AED, Backdoor.Antilam.g1, Backdoor.Antilam.g1
XTCP
Sockets de Troie
Remote Windows Shutdown
Farnaz - Alias: Backdoor.Farnaz, Backdoor.Farnaz, PWS-CL
CSCommand - Alias: BackDoor-PK, Backdoor.UltimateRAT.plugin
Canvas - Alias: Backdoor.Canvas.10, Canvas 1.0
NetDemon - Alias: Backdoor.NetDemon.10
|
|
