ctrlINT What the industry said about every indicator, with the quote

RunningRATMalware

RunningRAT is a remote access tool that appeared in operations surrounding the 2018 Pyeongchang Winter Olympics along with Gold Dragon and Brave Prince.From MITRE ATT&CK

Last reported 12 months ago, by Huntress1 report

ATT&CK techniques

1 technique · each with the sentence it comes from
  1. T1505.003Web Shell

    “…on where a threat actor used a creative technique called log poisoning (also referred to as log injection) to plant a basic evaluation web shell (also commonly referred to as the China Chopper web shell) on a web server.”

    HuntressVendor

What the reports say

1 report, newest first · the exact sentence from each

  1. “…IO, and an identical creation timestamp (2020-04-25 19:13:10 UTC) on the binary; however, Hunt IO stated this malware was a variant of RunningRAT.”

    HuntressVendor
    The Crown Prince, Nezha

Indicators in its reports

named in the reports above
Copy these 16 indicators · defanged

Thanks — we review every report.

Report a wrong match
What is wrong with RunningRAT here?
No account needed. We do not store your IP address.