Home Malware Programs Rootkits Snake Rootkit

Snake Rootkit

Posted: March 13, 2014

Threat Metric

Threat Level: 1/10
Infected PCs: 42
First Seen: March 13, 2014
Last Seen: January 30, 2023
OS(es) Affected: Windows


Snake rootkit is a malware threat that is categorized as rootkit. Snake's operation depends on kernel mode drivers, making it a rootkit. Snake rootkit is created to covertly install a backdoor on an affected computer system, cover the existence of its components, provide a communication mechanism with its C&C servers, and allow an effective data exfiltration mechanism. At the same time, Snake rootkit exposes a flexibility to conduct its operations by engaging these noticeably different architectures. Snake rootkit is sophisticated and uses complex techniques to evade host defences and provide the attackers covert communication channels. Snake rootkit shows two very different approaches to the task of building a cyber-espionage toolkit. One approach is to delegate the network communication engine to usermode code, backed up by a usermode rootkit. Another approach is to execute all of the communications from the kernel-mode driver, which is a very challenging task by itself.

Technical Details

Additional Information

The following URL's were detected:
easyemailcheck.co
Loading...