MITRE ATT&CKsoftware (malware)
S0247 NavRAT
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2018-10-17
Description
NavRAT is a remote access tool designed to upload, download, and execute files. It has been observed in attacks targeting South Korea.
Related
Uses · MITRE ATT&CK (9)
- T1071.003 Mail Protocols sub-technique
- T1074.001 Local Data Staging sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1056.001 Keylogging sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1055 Process Injection technique
- T1057 Process Discovery technique
- T1082 System Information Discovery technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G0067 APT37 group
References
- https://blog.talosintelligence.com/2018/05/navrat.html Talos NavRAT May 2018