RAT
9002 RAT
aka McRAT · Hydraq · HOMEUNIX
9002 RAT is a Remote Access Tool typically observed to be used by an APT to control a victim's machine.
9002 RAT, also known as McRAT, Hydraq, HOMEUNIX, is a Windows rat operated by Aurora Panda, APT31 and others.
Background
9002 RAT is a remote access tool generally seen in the hands of APT operators who use it to take control of targeted machines. Distribution has occurred through zero-day exploits, such as those against Internet Explorer, and through email attachments. In one infection chain, the victim opens a .LNK file, an OLE packager shell object, which in turn runs a PowerShell command.
Source: Malpedia (Fraunhofer FKIE).