SPYWARE: CrashCool 1-1
This signature detects the runtime behavior of spyware CrashCool. This spyware enables remotes attackers to connect to an infected host and execute commands. It also captures screenshots and logs keystrokes on the infected host.
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3