Skip to content
MalwareWiki

RAT

KRNRAT

According to Trend Micro, this is a rootkit with capabilities of a full-featured backdoor with various capabilities, including process manipulation, file hiding, shellcode execution, traffic concealme

KRNRAT is a Windows rat.

Background

Trend Micro reports this as a rootkit that doubles as a full-featured backdoor, offering process manipulation, file hiding, shellcode execution, traffic concealment, and C&C communication. Operators drive it through a set of IOCTL codes.

Source: Malpedia (Fraunhofer FKIE).