SQLRat

Malware & Tools · SQLRat

· MalwareS0390 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

—

Description

SQLRat is malware that executes SQL scripts to avoid leaving traditional host artifacts. FIN7 has been observed using it.(Citation: Flashpoint FIN 7 March 2019)

Tactic Coverage

execution (4)stealth (3)persistence (1)privilege escalation (1)command and control (1)

Used By (1 groups)

G0046FIN7GOLD NIAGARA, ITG14

Techniques (8)

T1027.010Command Obfuscation

stealth

T1053.005Scheduled Task

executionpersistence

T1059.001PowerShell

execution

T1059.003Windows Command Shell

execution

T1070.004File Deletion

stealth

T1105Ingress Tool Transfer

command and control

T1140

References

https://attack.mitre.org/software/S0390 https://www.flashpoint-intel.com/blog/fin7-revisited-inside-astra-panel-and-sqlrat-malware/