Rshell
- Malware type
- rat
- Family
- Malware family
- Profile updated
- 2026-07-07 13:01:50
Context
Rshell is a remote access tool (RAT) used by cybercriminals to gain unauthorized access to victim machines. This malware allows attackers to execute commands and exfiltrate data remotely. It has been used in various cyber espionage activities.
Detection coverage
- 3 YARA rules
Detection rules
- SEKOIA_Apt_Luckymouse_Rshell_Strings_All_Platform (yara-rule)
- SEKOIA_Apt_Luckymouse_Rshell_Strings (yara-rule)
- SIGNATURE_BASE_APT_MAL_APT27_Rshell_Jul24 (yara-rule)
Reports & references
- Trend Micro — Irontiger Compromises Chat App Mimi Targets Windows Mac Linux Users (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Rshell (report)