PureRAT Hides PE Payloads in PNGs for Fileless Execution

PureRAT Hides PE Payloads in PNGs for Fileless Execution

Summary

A multi-stage PureRAT campaign that hides portable executable (PE) payloads inside PNG images and executes them almost entirely in memory.

Description

A multi-stage PureRAT campaign that hides portable executable (PE) payloads inside PNG images and executes them almost entirely in memory.

Original reporting

AFBytes is a read-only aggregator. Use the original source for full context and complete reporting.

Open original source

Related coverage