Скачать или смотреть SentinelOne Vs. RATDispenser Malware – Quarantine and Kill

RATDispenser is a novel, JavaScript-based malware loader. It has been seen in conjunction with the delivery of multiple RAT families/campaigns and includes the distribution of Remcos, WSHRAT, Formbook, and many others. RATDispenser is typically distributed/delivered via a phishing email. The encoded JavaScript is decoded (at runtime) and written to %temp%. Any additional RAT payloads (in analyzed samples) are dropped into assigned directories in %appdata%/Roaming. Once a user is enticed into clicking/launching the javascript, the relevant installation script for the prescribed RAT will execute.

There is some variation across RATDispenser in that some analyzed variants will reach out to a C2 to download the necessary RAT payload. A majority of them, however, function as direct droppers.

#RATDispenser #ransomware #malware #cybersecurity #infosec #endpointprotection #endpointsecurity

~~~Subscribe to our channels:~~~
Website: https://www.sentinelone.com/​​
LinkedIn:   / sent​​.  .
Twitter:   / sentinelone​​  
Facebook:   / ​​  
Instagram:   / ​​  
~~~~~~~~~~~~
SentinelOne is the only cybersecurity solution encompassing AI-powered prevention, detection, response, and hunting across endpoints, containers, cloud workloads, and IoT devices in a single autonomous platform. With SentinelOne, organizations gain full transparency into everything happening across the network at machine speed – to defeat every attack, at every stage of the threat lifecycle. To learn more visit www.sentinelone.com.