ObliqueRAT

Malware & Tools · ObliqueRAT

· MalwareS0644 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

ObliqueRAT is a remote access trojan, similar to Crimson, that has been in use by Transparent Tribe since at least 2020.(Citation: Talos Oblique RAT March 2021)(Citation: Talos Transparent Tribe May 2021)

Tactic Coverage

discovery (6)collection (4)stealth (2)exfiltration (1)execution (1)persistence (1)privilege escalation (1)

Used By (1 groups)

G0134Transparent TribeCOPPER FIELDSTONE, APT36

Techniques (14)

T1025Data from Removable Media

collection

T1027.003Steganography

stealth

T1030Data Transfer Size Limits

exfiltration

T1033System Owner/User Discovery

discovery

T1057Process Discovery

discovery

T1074.001Local Data Staging

collection

T1082System Information Discovery

References

https://attack.mitre.org/software/S0644 https://blog.talosintelligence.com/2021/02/obliquerat-new-campaign.html https://blog.talosintelligence.com/2021/05/transparent-tribe-infra-and-targeting.html