MITRE ATT&CKsoftware (tool)
S0262 QuasarRAT
- Domain
- enterprise
- Platforms
- Windows
- Aliases
- xRAT
- Version
- 2.2
- Created
- 2018-10-17
Description
Related
Uses · MITRE ATT&CK (25)
- T1614 System Location Discovery technique
- T1573.001 Symmetric Cryptography sub-technique
- T1571 Non-Standard Port technique
- T1564.003 Hidden Window sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1564.001 Hidden Files and Directories sub-technique
- T1555.003 Credentials from Web Browsers sub-technique
- T1021.001 Remote Desktop Protocol sub-technique
- T1056.001 Keylogging sub-technique
- T1555 Credentials from Password Stores technique
- T1553.002 Code Signing sub-technique
- T1552.001 Credentials In Files sub-technique
- T1548.002 Bypass User Account Control sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1053.005 Scheduled Task sub-technique
- T1005 Data from Local System technique
- T1010 Application Window Discovery technique
- T1016 System Network Configuration Discovery technique
- T1033 System Owner/User Discovery technique
- T1082 System Information Discovery technique
- T1090 Proxy technique
- T1095 Non-Application Layer Protocol technique
- T1105 Ingress Tool Transfer technique
- T1112 Modify Registry technique
- T1125 Video Capture technique
References
- https://securelist.com/apt10-sophisticated-multi-layered-loader-ecipekac-discovered-in-a41apt-campaign/101519/ Securelist APT10 March 2021
- https://documents.trendmicro.com/assets/tech-brief-untangling-the-patchwork-cyberespionage-group.pdf TrendMicro Patchwork Dec 2017
- https://github.com/quasar/QuasarRAT GitHub QuasarRAT
- https://www.volexity.com/blog/2018/06/07/patchwork-apt-group-targets-us-think-tanks/ Volexity Patchwork June 2018