MITRE ATT&CKsoftware (malware)
S0292 AndroRAT
- Domain
- mobile
- Platforms
- Android
- Version
- 1.1
- Created
- 2017-10-25
Description
AndroRAT is an open-source remote access tool for Android devices. AndroRAT is capable of collecting data, such as device location, call logs, etc., and is capable of executing actions, such as sending SMS messages and taking pictures. It is originally available through the `The404Hacking` Github repository.
Related
Uses · MITRE ATT&CK (10)
- T1655.001 Match Legitimate Name or Location sub-technique
- T1636.002 Call Log sub-technique
- T1636.003 Contact List sub-technique
- T1636.004 SMS Messages sub-technique
- T1616 Call Control technique
- T1582 SMS Control technique
- T1512 Video Capture technique
- T1422 System Network Configuration Discovery technique
- T1429 Audio Capture technique
- T1430 Location Tracking technique
References
- https://www.forcepoint.com/blog/x-labs/bitter-targeted-attack-against-pakistan Forcepoint BITTER Pakistan Oct 2016
- https://blog.lookout.com/blog/2016/05/25/spoofed-apps/ Lookout-EnterpriseApps
- https://web.archive.org/web/20221013124327/https:/github.com/The404Hacking/AndroRAT github_androrat