Sec
Lookup
Search
MITRE ATT&CK
software (malware)
S0055
RARSTONE
Published 2017-05-31
Modified 2025-04-25
Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2017-05-31
Description
RARSTONE
is malware used by the
Naikon
group that has some characteristics similar to
PlugX
.
Related
Uses · MITRE ATT&CK
(4)
T1055.001
Dynamic-link Library Injection
sub-technique
T1083
File and Directory Discovery
technique
T1095
Non-Application Layer Protocol
technique
T1105
Ingress Tool Transfer
technique
Referenced by MITRE ATT&CK · uses
(1)
G0019
Naikon
group
References
http://blog.trendmicro.com/trendlabs-security-intelligence/rarstone-found-in-targeted-attacks/
Aquino RARSTONE