Simple Netcat Backdoor in Python Script, (Sat, Sep 30th)

Why reinvent the wheel? We are all lazy and, if we have a tool that offers some interesting capabilities, why not use it? I spotted a simple maliciouis Python script targeting Windows hosts. The file (SHA256:d706d94981bc53ab1458519f224b9602152325fc2a18f3df9d9da8f562b99044) is flagged by 16 antivirus products on VirusTotal[1]. Nothing very exciting with the script, it’s a bot that uses a Discord channel for C2 communications. 

Article Link: https://isc.sans.edu/diary/rss/30264

1 post - 1 participant

Read full topic

antivirus backdoor capabilities exciting file flagged netcat products python python script sat script sha256 simple targeting tool virustotal windows