Security Response Custom Report

The Symantec Security Response report analyzes Backdoor.Remsec, a modular malware framework that enables attackers to gain remote control over compromised systems through components such as a loader, executable blobs, Lua modules, network loaders, keylogger functionality, and various back doors (named pipes, HTTP, ICMP). It documents payload structures, persistence/injection techniques, C2 mechanisms, and a broad set of indicators of compromise (hashes, file paths, and network indicators) along with Yara signatures to detect Remsec artifacts.