SPYWARE: FF-RAT Malware Server Response

This signature detects the runtime behavior of FF-RAT. FF-RAT is a remote administration tool (RAT). It enables remote attackers to control and monitor an infected machine.

Short Name
SPYWARE:RAT:FF-RAT-SRV-RSP
Severity
Major
Recommended
True
Recommended Action
Drop
Category
SPYWARE
Keywords
FF-RAT Malware Response Server
Release Date
08/12/2015
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
Port
TCP/5198,5199,6061,10012
False Positive
Unknown

Found a potential security threat?