AI Waifu RAT or LOLBin Localhost Network Traffic
Detects processes associated with AI Waifu RAT or common Living-off-the-Land Binaries (LOLBins) making network connections to localhost. This behavior is indicative of the AI Waifu RAT's C2 and staging mechanisms, which use local ports for command execution and payload delivery.
YARA-L
