HatMan Update Published – 03-01-19

Today the DHS NCCIC-ICS published an update to their malware analysis report (MAR) for HatMan; the safety system malware. The MAR was originally published on December 18^th, 2017 and previously updated on April 10^th, 2018. The update includes an updated YARA signature to identify a custom, Windows-based remote deployment tool that threat actors may have used.

NOTE: A number of minor formatting changes and a few inconsequential wording changes were also made in the document.