SYMBOLCOMMON_NAMEaka. SYNONYMS
win.schneiken (Back to overview)

Schneiken


Schneiken is a VBS 'Double-dropper'. It comes with two RATs embedded in the code (Dunihi and Ratty). Entire code is Base64 encoded.

References
2018-04-16SalesforceVishal Thakur
Malware Analysis: New Trojan Double Dropper
Schneiken
2018-04-10Github (vithakur)Vishal Thakur
schneiken
Schneiken

There is no Yara-Signature yet.