Unidentified 113 (RAT)

Malware type
rat, keylogger, screen-capture
Profile updated
2026-07-07 15:24:57

Targeted industries: technology-and-telecommunications financial-services government-and-public-sector

Context

According to Phylum, this is a RAT with these characteristics: * Registers as a scheduled task. * Receives commands from a remote server using web sockets. * Installs Chrome extensions to Secure Preferences. * Configures AnyDesk, hides the screen, and disables shutting down Windows. * Captures keyboard and mouse events. * Collects information about files, browser extensions, and browser history.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Unidentified 113 (report)
  • blog.phylum.io — Npm Package Found Delivering Sophisticated Rat (report)

External references