ASUSTeK Computer Inc. guncellemesi olarak gizlenmis ozel RAT. JSON C2 protokolu (cJSON kutuphane). Komutlar: ping, cmd, filemgr, fileupload, del. Donanim kimlik (hwid) bazli takip. cmd.exe output yakalama. Dosya yonetici ve yukle ozellikleri.
AsusUpdateRAT 624c6b56 PE32 1.1MB. ASUSTeK Computer disguise (AsusUpdateSetup.exe). JSON C2 protokolu cJSON. hwid/ping/cmd/filemgr/fileupload/task/del. HTTP InternetOpenW+HttpSendRequest. cmd.exe output capture.
Читать отчёт →