NavRAT

Malware & Tools · NavRAT

· MalwareS0247 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

NavRAT is a remote access tool designed to upload, download, and execute files. It has been observed in attacks targeting South Korea. (Citation: Talos NavRAT May 2018)

Tactic Coverage

privilege escalation (2)collection (2)discovery (2)command and control (2)stealth (1)credential access (1)execution (1)persistence (1)

Used By (1 groups)

G0067APT37InkySquid, ScarCruft

Techniques (9)

T1055Process Injection

stealthprivilege escalation

T1056.001Keylogging

collectioncredential access

T1057Process Discovery

discovery

T1059.003Windows Command Shell

execution

T1071.003Mail Protocols

command and control

T1074.001Local Data Staging

collection

References

https://attack.mitre.org/software/S0247 https://blog.talosintelligence.com/2018/05/navrat.html