Skip to content

RAT

Orcus RAT

aka Schnorchel

Orcus has been advertised as a Remote Administration Tool (RAT) since early 2016.

Orcus RAT, also known as Schnorchel, is a Windows rat.

Background

Marketed as a Remote Administration Tool (RAT) since the start of 2016, Orcus offers the full set of features one would expect from a RAT and then some, with its extensive command list published on the operators' website. What sets it apart is support for loading custom user-built plugins alongside ready-made ones from the Orcus repository, and the ability for operators to run C# and VB.net code on the victim machine in real time.


Source: Malpedia (Fraunhofer FKIE).