Trusted Design

WEBC2-RAVE (FAMILY)

概要

A WEBC2 backdoor is designed to retrieve a Web page from a pre-determined C2 server. It expects the Web page to contain special HTML tags; the backdoor will attempt to interpret the data between the tags as commands. This family of malware will set itself up as a service and connect out to a hardcoded web page and read a modified base64 string from this webpage. The later versions of this malware supports three commands (earlier ones are just downloaders or reverse shells). The first commands will sleep the malware for N number of hours. The second command will download a binary from the encoded HTML comment and execute it on the infected host. The third will spawn an encoded reverse shell to an attacker specified location and port.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• WEBC2-UGX (FAMILY) (score: 0.89)
• WEBC2-BOLID (FAMILY) (score: 0.85)
• WEBC2-YAHOO (FAMILY) (score: 0.83)
• WEBC2-AUSOV (FAMILY) (score: 0.83)
• WEBC2-DIV (FAMILY) (score: 0.83)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る