rat
SvchostPayload
Named by 1 report, 2 detection rules, 1 IOC feed.
Reports
Detection rules
YARA rules whose family metadata names this family, by detection page.
Detection rules
CloudSync: An Assembler's Intrusion Toolkit
RAT_SvchostPayload_ParalellInjector_TypeNames, Loader_SvchostJS_CustomAlphabet
IOC feeds
A family name here is the label the linked rule, feed or profile carries, normalised to one spelling by _data/families.yml. Where a report declines to name a family, this page does not either.