Revenge RAT

Malware & Tools · Revenge RAT

· MalwareS0379 · Zararlı Yazılım

Type

malware

Techniques

Used By

2 groups

Platforms

Windows

Description

Revenge RAT is a freely available remote access tool written in .NET (C#).(Citation: Cylance Shaheen Nov 2018)(Citation: Cofense RevengeRAT Feb 2019)

Tactic Coverage

collection (4)discovery (3)execution (3)command and control (3)credential access (2)persistence (2)privilege escalation (2)stealth (2)lateral movement (1)

Used By (2 groups)

G1018TA2541 G0089The White Company

Techniques (18)

T1003OS Credential Dumping

credential access

T1016System Network Configuration Discovery

discovery

T1021.001Remote Desktop Protocol

lateral movement

T1033System Owner/User Discovery

discovery

T1053.005Scheduled Task

executionpersistence

T1056.001Keylogging

collectioncredential access

References

https://attack.mitre.org/software/S0379 https://web.archive.org/web/20200428173819/https://cofense.com/upgrades-delivery-support-infrastructure-revenge-rat-malware-bigger-threat/https://www.cylance.com/content/dam/cylance-web/en-us/resources/knowledge-center/resource-library/reports/WhiteCompanyOperationShaheenReport.pdf?_ga=2.161661948.1943296560.1555683782-1066572390.1555511517