Skip to content
MalwareWiki

Malware

RTM

aka Redaman

RTM Banker also known as Redaman was first blogged about in February 2017 by ESET.

RTM Banker also known as Redaman was first blogged about in February 2017 by ESET. The malware is written in Delphi and shows some similarities (like process list) with Buhtrap. It uses a slightly modified version of RC4 to encrypt its strings, network data, configuration and modules, according to ESET.

Family metadata imported from Malpedia (Fraunhofer FKIE).