Unidentified VBS 004 (RAT)

First seen
2020-11-01 00:00:00
Malware type
rat
Profile updated
2026-07-07 14:41:47

Targeted industries: government-and-public-sector energy-and-utilities

Targeted regions: country_code:ir country_code:sa country_code:tr

Context

Lab52 describes this as a light first-stage RAT used by MuddyWater and observed samples between at least November 2020 and January 2022.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Vbs.Unidentified 004 (report)
  • lab52.io — Muddywaters Light First Stager Targetting Middle East (report)

External references