9002
- First seen
- 2009-04-01 00:00:00
- Malware type
- rat
- Family
- Malware family
- Last IoC activity
- 2026-07-22 04:09:28
- Profile updated
- 2026-07-07 16:18:18
Targeted industries: government-and-public-sector financial-services education-and-nonprofits
Targeted regions: country_code:cn country_code:us
Context
The 9002 malware is a remote access trojan (RAT) primarily associated with cyber espionage activities. It has been used in various targeted attacks against government and financial organizations, often attributed to state-sponsored groups.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_9002_Auto (yara-rule)