ComRAT (aka Chinch) is a complex malware backdoor written in C++, descended from Agent.BTZ, used by the Turla APT group.
https://web-assets.esetstatic.com/wls/2020/05/ESET_Turla_ComRAT.pdf
Linux Persistence: Startup Scripts
2024-11-10 DFIR CTF linux persistence systemd SysV init startup script
Linux Persistence: Cron
2024-11-10 DFIR CTF linux persistence cron
Linux Persistence: User Accounts
2021-06-27 DFIR linux persistence