NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/RCSession
● Malware

RCSession

RCSession is a backdoor written in C++ that has been in use since at least 2018 by Mustang Panda and by Threat Group-3390 (Type II Backdoor).

View graph Watch Export
Indicators tracked
0
Intelligence Reports30
30 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
24 relationships
T1113: Screen Capture
source
T1027.011: Fileless Storage
source
T1033: System Owner/User Discovery
source
T1056.001: Keylogging
source
T1548.002: Bypass User Account Control
source
T1574.001: DLL
source
T1082: System Information Discovery
source
T1218.007: Msiexec
source
T1106: Native API
source
T1005: Data from Local System
source
T1036: Masquerading
source
T1112: Modify Registry
source
T1057: Process Discovery
source
T1547.001: Registry Run Keys / Startup Folder
source
T1055.012: Process Hollowing
source
T1573: Encrypted Channel
source
T1095: Non-Application Layer Protocol
source
T1059.003: Windows Command Shell
source
T1070.004: File Deletion
source
T1071.001: Web Protocols
source
T1105: Ingress Tool Transfer
source
T1027.015: Compression
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon