win.cannibal_rat (Back to overview)

Cannibal Rat

Cannibal Rat is a python written remote access trojan with 4 versions as of March 2018. The RAT is reported to impact users of a Brazilian public sector management school. The RAT is distributed in a py2exe format, with the python27.dll and the python bytecode stored as a PE resource and the additional libraries zipped in the overlay of the executable.

2018-02-28Cisco TalosVitor Ventura, Warren Mercer
CannibalRAT targets Brazil
Cannibal Rat

There is no Yara-Signature yet.