MALWARE-C2 Trojan.Java.SawRAT.A TCP Connection -1

Rule ID

1234167

Severity

High

Description

Trojan.Java.SawRAT.A is a Trojan that targets the Windows platform. The malware can accept various commands from the attacker to perform tasks on the victim's machine such as collecting system information including operating system name, username, hostname, list of available drives, capturing screenshots, file exfiltration and more.

Impact

Information disclosure

Recommendation

Update vendor's patch.

IPS Category

Malware traffic

IPS Anomaly Group

N/A

IPS Rule Default Action

Allow

References

Keywords

N/A