Skip to content

RAT

win.innfirat

InnifiRAT is coded in .NET and targets personal data on infected devices, with it's top priority appearing to be bitcoin and litecoin wallet data.

win.innfirat is a Windows rat.

Background

Written in .NET, InnfiRAT goes after personal information stored on compromised machines, with bitcoin and litecoin wallet data appearing to be its main focus.

The malware also bundles a backdoor that gives attackers remote command over the infected host, enabling capabilities such as keystroke logging, capturing webcam images, reaching sensitive data, wiping drives, and more.

In addition, it tries to harvest browser cookies to obtain credentials and keeps an eye on user activity through a screenshot feature.


Source: Malpedia (Fraunhofer FKIE).