How to Analyze a Remote Administration Tool (RAT)
Remote Administration Tools are a common nuisance in the malware landscape, and they aim to achieve total control over the targeted computer. They usually contain various anti-debugging and anti-analysis techniques, making them harder and more time consuming to analyze.
This video describes how a threat analyst would analyze a remote administration tool using the ReversingLabs Titanium Platform. It demonstrates several important concepts, such as verifying if the classification is correct, how to inspect metadata for data points (e.g. bot C2 configuration, PE version information, and behavioral indicators), and how to pivot through advanced search using some of the observed metadata.
Explore our YouTube channel to learn more or visit us at https://www.reversinglabs.com/
Follow us on Twitter: / reversinglabs
Follow us on LinkedIn: / reversinglabs
Follow us on Instagram: / reversinglabs