jRAT

Malware & Tools · jRAT

· MalwareS0283 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Linux, Windows, macOS, Android

Description

jRAT is a cross-platform, Java-based backdoor originally available for purchase in 2012. Variants of jRAT have been distributed via a software-as-a-service platform, similar to an online subscription model.(Citation: Kaspersky Adwind Feb 2016) (Citation: jRAT Symantec Aug 2018)

Tactic Coverage

discovery (8)collection (5)execution (4)credential access (4)stealth (3)command and control (2)lateral movement (1)exfiltration (1)persistence (1)privilege escalation (1)

Used By (1 groups)

G1018TA2541

Techniques (28)

T1007System Service Discovery

discovery

T1016System Network Configuration Discovery

discovery

T1021.001Remote Desktop Protocol

lateral movement

T1027Obfuscated Files or Information

stealth

T1027.002Software Packing

stealth

T1029Scheduled Transfer

exfiltration

T1037.005Startup Items

References

https://attack.mitre.org/software/S0283 https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07195002/KL_AdwindPublicReport_2016.pdf https://www.symantec.com/blogs/threat-intelligence/jrat-new-anti-parsing-techniques https://www.ncsc.gov.uk/report/joint-report-on-publicly-available-hacking-tools