Fileless Revenge RAT Malware

AhnLab SEcurity intelligence Center (ASEC) recently discovered the distribution of Revenge RAT malware that had been developed based on legitimate tools. It appears that the attackers have used tools such as ‘smtp-validator’ and ‘Email To Sms’. At the time of execution, the malware creates and runs both a legitimate tool and a malicious file, making it difficult for users to realize that a malicious activity has occurred.

As shown in the code below, the threat actor creates and runs Setup.exe …

ahnlab asec attackers center distribution email file fileless intelligence making malicious malware malware analysis rat rat malware security security intelligence sms smtp tool tools