MITRE ATT&CKsoftware (malware)

S0495 RDAT

Published 2020-07-28 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2020-07-28

Description

RDAT is a backdoor used by the suspected Iranian threat group OilRig. RDAT was originally identified in 2017 and targeted companies in the telecommunications sector.

Related

Uses · MITRE ATT&CK (20)

  • T1573.001 Symmetric Cryptography sub-technique
  • T1001.002 Steganography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1071.003 Mail Protocols sub-technique
  • T1071.004 DNS sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1132.002 Non-Standard Encoding sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1036.004 Masquerade Task or Service sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1027.003 Steganography sub-technique
  • T1070.004 File Deletion sub-technique
  • T1543.003 Windows Service sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1001 Data Obfuscation technique
  • T1008 Fallback Channels technique
  • T1030 Data Transfer Size Limits technique
  • T1041 Exfiltration Over C2 Channel technique
  • T1105 Ingress Tool Transfer technique
  • T1113 Screen Capture technique

Referenced by MITRE ATT&CK · uses (1)

References