About this document

Analysis of Lazarus RAT FALLCHILL by GrehwaltLindgreen is a document available to read on EtoBox.

This document analyzes FALLCHILL, a RAT used by Lazarus Group since 2016. It decrypts strings using RC4 and collects victim system information like OS details, MAC address, and IP address to generate a unique ID. The RAT communicates with two command and control servers and implements various functions to gather sensitive data and execute commands remotely.

Author

GrehwaltLindgreen

Language

EN