Description

The Process Enumeration feature in malware provides attackers with a detailed inventory of all running processes on a compromised system. This is the digital equivalent of a burglar quietly taking stock of valuables in a home. By cataloging active processes, the malware gains insights into the software environment, including potential vulnerabilities and operational characteristics of the target system. This information can be invaluable for escalating privileges, inserting additional payloads, or avoiding detection by identifying security software that may be running. Process Enumeration thereby serves as a crucial intelligence-gathering step, arming attackers with the necessary data to tailor their subsequent actions for maximum impact and minimum detection.

Categories System Management, Disruption
Dangerousness Medium

Associated with Releases

Version Origins Authors Languages Release Date
Back Orifice 1.20 logoBack Orifice 1.20 United States ๐Ÿ‡บ๐Ÿ‡ธ Cult of the Dead Cow (cDc) C++ Jul, 1998
Back Orifice 2000 (BO2K) 1.0 logoBack Orifice 2000 (BO2K) 1.0 United States ๐Ÿ‡บ๐Ÿ‡ธ Cult of the Dead Cow (cDc) C++ Jul, 1999
SubSeven 2.1 logoSubSeven 2.1 Romania ๐Ÿ‡ท๐Ÿ‡ด, Canada ๐Ÿ‡จ๐Ÿ‡ฆ Mobman Delphi Nov, 1999
SubSeven 2.1.1 GOLD edition logoSubSeven 2.1.1 GOLD edition Romania ๐Ÿ‡ท๐Ÿ‡ด, Canada ๐Ÿ‡จ๐Ÿ‡ฆ Mobman Delphi Feb, 2000
SubSeven 2.1.2 M.U.I.E logoSubSeven 2.1.2 M.U.I.E Romania ๐Ÿ‡ท๐Ÿ‡ด, Canada ๐Ÿ‡จ๐Ÿ‡ฆ Mobman Delphi Apr, 2000
SubSeven 2.1.3 BONUS logoSubSeven 2.1.3 BONUS Romania ๐Ÿ‡ท๐Ÿ‡ด, Canada ๐Ÿ‡จ๐Ÿ‡ฆ Mobman Delphi Jun, 2000
SubSeven 2.1.4 DEFCON 8 logoSubSeven 2.1.4 DEFCON 8 Romania ๐Ÿ‡ท๐Ÿ‡ด, Canada ๐Ÿ‡จ๐Ÿ‡ฆ Mobman Delphi Jul, 2000
Y3K rat 1.5 logoY3K rat 1.5 Greece ๐Ÿ‡ฌ๐Ÿ‡ท firelarm , Chucky Delphi Jan, 2001
SubSeven 2.2 logoSubSeven 2.2 Romania ๐Ÿ‡ท๐Ÿ‡ด, Canada ๐Ÿ‡จ๐Ÿ‡ฆ Mobman Delphi Mar, 2001
Y3K rat 1.6 MS logoY3K rat 1.6 MS Greece ๐Ÿ‡ฌ๐Ÿ‡ท firelarm , Chucky Delphi Jul, 2001
Optix Pro 1.0 logoOptix Pro 1.0 Unknown ๐Ÿดโ€โ˜ ๏ธ s13az3 Delphi Apr, 2002
Net-Devil 1.5 logoNet-Devil 1.5 Unknown ๐Ÿดโ€โ˜ ๏ธ Nilez Delphi Jul, 2002
MoSucker 3.0b logoMoSucker 3.0b Germany ๐Ÿ‡ฉ๐Ÿ‡ช Superchachi Visual Basic 6 (VB6) Nov, 2002
Beast 1.91 logoBeast 1.91 Romania ๐Ÿ‡ท๐Ÿ‡ด Tataye Delphi Jan, 2003
SubSeven 2.1.5 Legends logoSubSeven 2.1.5 Legends Romania ๐Ÿ‡ท๐Ÿ‡ด, Canada ๐Ÿ‡จ๐Ÿ‡ฆ Mobman Delphi Feb, 2003
Beast 2.01 logoBeast 2.01 Romania ๐Ÿ‡ท๐Ÿ‡ด Tataye Delphi Jun, 2003
LanFiltrator 1.1 Fix 1 logoLanFiltrator 1.1 Fix 1 Australia ๐Ÿ‡ฆ๐Ÿ‡บ Read101 Delphi Aug, 2003
Optix Pro 1.32 logoOptix Pro 1.32 Unknown ๐Ÿดโ€โ˜ ๏ธ s13az3 , xMs Delphi Sep, 2003
CIA 1.2 logoCIA 1.2 England ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ Alchemist Visual Basic 6 (VB6) Sep, 2003
Beast 2.02 logoBeast 2.02 Romania ๐Ÿ‡ท๐Ÿ‡ด Tataye Delphi Sep, 2003
Sinique 1.0 logoSinique 1.0 Unknown ๐Ÿดโ€โ˜ ๏ธ xtremeNTL Delphi Oct, 2003
Fearless Lite 1.01 logoFearless Lite 1.01 Australia ๐Ÿ‡ฆ๐Ÿ‡บ, France ๐Ÿ‡ซ๐Ÿ‡ท Read101 , Triforce Delphi Nov, 2003
Hue 1.0 logoHue 1.0 Unknown ๐Ÿดโ€โ˜ ๏ธ B33T Visual Basic 6 (VB6) Jan, 2004
Nuclear RAT 1.0 Beta 5 logoNuclear RAT 1.0 Beta 5 Brazil ๐Ÿ‡ง๐Ÿ‡ท Caesar2k Delphi Feb, 2004
ProRat 1.4 logoProRat 1.4 Turkey ๐Ÿ‡น๐Ÿ‡ท HighLander , ATmaCA Borland C++ Feb, 2004
LanFiltrator 1.5 Beta III logoLanFiltrator 1.5 Beta III Australia ๐Ÿ‡ฆ๐Ÿ‡บ Read101 Delphi Feb, 2004
ProRat 1.6 logoProRat 1.6 Turkey ๐Ÿ‡น๐Ÿ‡ท HighLander , ATmaCA Borland C++ Mar, 2004
ProRat 1.8 logoProRat 1.8 Turkey ๐Ÿ‡น๐Ÿ‡ท HighLander , ATmaCA Borland C++ Apr, 2004
Infector NG 2004 2.1.0 logoInfector NG 2004 2.1.0 Belgium ๐Ÿ‡ง๐Ÿ‡ช, United Kingdom ๐Ÿ‡ฌ๐Ÿ‡ง fc , Infiltration Delphi May, 2004
Beast 2.07 logoBeast 2.07 Romania ๐Ÿ‡ท๐Ÿ‡ด Tataye Delphi Aug, 2004
Optix Pro 1.33 logoOptix Pro 1.33 Unknown ๐Ÿดโ€โ˜ ๏ธ s13az3 Delphi Aug, 2004
Flux 1.0 logoFlux 1.0 Unknown ๐Ÿดโ€โ˜ ๏ธ Gargamel C++ Aug, 2004
ProRat 1.9 logoProRat 1.9 Turkey ๐Ÿ‡น๐Ÿ‡ท HighLander , ATmaCA Borland C++ Aug, 2004
Institution 2004 0.4.0 logoInstitution 2004 0.4.0 United States ๐Ÿ‡บ๐Ÿ‡ธ Aphex Delphi Oct, 2004
CIA 1.3 logoCIA 1.3 England ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ Alchemist Visual Basic 6 (VB6) Dec, 2004
Y3K rat 2k5 RC 1.0 logoY3K rat 2k5 RC 1.0 Germany ๐Ÿ‡ฉ๐Ÿ‡ช SHA Delphi Jun, 2005
DARKMOON 4.11 / 4.11 Private Edition logoDARKMOON 4.11 / 4.11 Private Edition Spain ๐Ÿ‡ช๐Ÿ‡ธ shukisnike Delphi Jun, 2005
Bifrost 1.2.1 logoBifrost 1.2.1 Sweden ๐Ÿ‡ธ๐Ÿ‡ช ksv C++ Jan, 2007
Hav-Rat 1.2 logoHav-Rat 1.2 Sweden ๐Ÿ‡ธ๐Ÿ‡ช Havalito Delphi Feb, 2007
Bandook 1.35 logoBandook 1.35 Lebanon ๐Ÿ‡ฑ๐Ÿ‡ง PrinceAli Delphi, C++ Apr, 2007
Poison Ivy 2.3.0 logoPoison Ivy 2.3.0 Sweden ๐Ÿ‡ธ๐Ÿ‡ช Shapeless Delphi, MASM Jun, 2007
Hav-Rat 1.3.2 logoHav-Rat 1.3.2 Sweden ๐Ÿ‡ธ๐Ÿ‡ช Havalito Delphi Jul, 2007
sharK 2.4.0 Fwb+ logosharK 2.4.0 Fwb+ Germany ๐Ÿ‡ฉ๐Ÿ‡ช sNiper109 , rockZ Visual Basic 6 (VB6) Aug, 2007
Nuclear RAT 2.1.0 logoNuclear RAT 2.1.0 Brazil ๐Ÿ‡ง๐Ÿ‡ท Caesar2k Delphi Sep, 2007
Poison Ivy 2.3.2 logoPoison Ivy 2.3.2 Sweden ๐Ÿ‡ธ๐Ÿ‡ช Shapeless Delphi, MASM Jan, 2008
Turkojan 4 logoTurkojan 4 Turkey ๐Ÿ‡น๐Ÿ‡ท FยตNGยตยง Delphi Feb, 2008
sharK 3.1 fwb++ logosharK 3.1 fwb++ Germany ๐Ÿ‡ฉ๐Ÿ‡ช sNiper109 , rockZ Visual Basic 6 (VB6) Mar, 2008
SynRAT 2.1 logoSynRAT 2.1 France ๐Ÿ‡ซ๐Ÿ‡ท DarkCoderSc Delphi Oct, 2008
Lost Door 3.0 Stable logoLost Door 3.0 Stable Tunisia ๐Ÿ‡น๐Ÿ‡ณ OussamiO Visual Basic 6 (VB6) Mar, 2009
SynRAT 4.0.1 logoSynRAT 4.0.1 France ๐Ÿ‡ซ๐Ÿ‡ท DarkCoderSc Delphi May, 2009
PrjRAPTOR 1.8 logoPrjRAPTOR 1.8 United States ๐Ÿ‡บ๐Ÿ‡ธ Ryan.M Visual Basic 6 (VB6) Jul, 2009
Cerberus 1.0 Beta logoCerberus 1.0 Beta United States ๐Ÿ‡บ๐Ÿ‡ธ, United Kingdom ๐Ÿ‡ฌ๐Ÿ‡ง Protocol , Steve10120 , 2sly , Sam Delphi Aug, 2009
Cerberus 1.01 Beta logoCerberus 1.01 Beta United States ๐Ÿ‡บ๐Ÿ‡ธ, United Kingdom ๐Ÿ‡ฌ๐Ÿ‡ง Protocol , Steve10120 , 2sly , Sam Delphi Aug, 2009
Cerberus 1.02 Beta logoCerberus 1.02 Beta United States ๐Ÿ‡บ๐Ÿ‡ธ, United Kingdom ๐Ÿ‡ฌ๐Ÿ‡ง Protocol , Steve10120 , 2sly , Sam Delphi Aug, 2009
Apocalypse RAT 1.4 logoApocalypse RAT 1.4 Turkey ๐Ÿ‡น๐Ÿ‡ท ap0calypse Delphi Aug, 2009
Cerberus 1.03.4 logoCerberus 1.03.4 United States ๐Ÿ‡บ๐Ÿ‡ธ, United Kingdom ๐Ÿ‡ฌ๐Ÿ‡ง Protocol , Steve10120 , 2sly , Sam Delphi Sep, 2009
Spy-Net 2.6 logoSpy-Net 2.6 Brazil ๐Ÿ‡ง๐Ÿ‡ท Raphael Delphi Oct, 2009
DarkComet RAT 1.3 logoDarkComet RAT 1.3 France ๐Ÿ‡ซ๐Ÿ‡ท DarkCoderSc Nov, 2009
Cerberus 1.03.5 Beta logoCerberus 1.03.5 Beta United States ๐Ÿ‡บ๐Ÿ‡ธ, United Kingdom ๐Ÿ‡ฌ๐Ÿ‡ง Protocol , Steve10120 , 2sly , Sam Delphi Dec, 2009
DarkComet RAT 2.0 RC4 logoDarkComet RAT 2.0 RC4 France ๐Ÿ‡ซ๐Ÿ‡ท DarkCoderSc Delphi Mar, 2010
CyberGate 1.04.8 logoCyberGate 1.04.8 United States ๐Ÿ‡บ๐Ÿ‡ธ johnyk Delphi Apr, 2010
Lost Door 4.3.1 logoLost Door 4.3.1 Tunisia ๐Ÿ‡น๐Ÿ‡ณ OussamiO Visual Basic 6 (VB6) Apr, 2010
Lost Door 5.1 logoLost Door 5.1 Tunisia ๐Ÿ‡น๐Ÿ‡ณ OussamiO Visual Basic 6 (VB6) Oct, 2010
Coolvibes 1 Update 8 logoCoolvibes 1 Update 8 Spain ๐Ÿ‡ช๐Ÿ‡ธ Thor Delphi May, 2011
Xtreme RAT 2.9 logoXtreme RAT 2.9 Brazil ๐Ÿ‡ง๐Ÿ‡ท Raphael Delphi Jul, 2011
DarkComet RAT 5.3.1 logoDarkComet RAT 5.3.1 France ๐Ÿ‡ซ๐Ÿ‡ท DarkCoderSc Delphi Jun, 2012
NjRat 0.7d logoNjRat 0.7d Kuwait ๐Ÿ‡ฐ๐Ÿ‡ผ njq8 VB .net Dec, 2013
Lost Door 9.2 Aws logoLost Door 9.2 Aws Tunisia ๐Ÿ‡น๐Ÿ‡ณ OussamiO Visual Basic 6 (VB6) Jan, 2022