Skip to content

RAT

PureRAT

aka PureHVNC · ResolverRAT

According to Morphisec, this RAT combines advanced in-memory execution, API and resource resolution at runtime, and layered evasion techniques.

PureRAT, also known as PureHVNC, ResolverRAT, is a Windows rat.

Background

Morphisec reports that this RAT blends advanced in-memory execution with runtime resolution of APIs and resources and multiple layers of evasion. They dubbed it 'Resolver' because of its heavy use of runtime resolution and dynamic resource handling, both of which make static and behavioral analysis considerably harder.


Source: Malpedia (Fraunhofer FKIE).