SPYWARE: CoolCat

This signature detects the runtime behavior of the spyware CoolCat, a remote administration tool used by attackers to completely control a remote computer. Attackers can use Coolcat to perform activities such as all shell operations, download and upload files, start programs, reboot or shut down windows, view or modify registry keys, and view or kill processes.

Short Name
SPYWARE:RAT:COOLCAT
Severity
Critical
Recommended
False
Recommended Action
Drop
Category
SPYWARE
Keywords
CoolCat
Release Date
04/01/2005
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
Port
TCP/1969
False Positive
Unknown

Found a potential security threat?