Signature Detail
Short Name |
SPYWARE:RAT:COOLCAT |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
SPYWARE |
Keywords |
Spyware Remote Administration Tool CoolCat |
Release Date |
2005/04/01 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SPYWARE: CoolCat
This signature detects the runtime behavior of the spyware CoolCat, a remote administration tool used by attackers to completely control a remote computer. Attackers can use Coolcat to perform activities such as all shell operations, download and upload files, start programs, reboot or shut down windows, view or modify registry keys, and view or kill processes.
Extended Description
None
References