MITRE ATT&CKsoftware (malware)
S0644 ObliqueRAT
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2021-09-08
Description
ObliqueRAT is a remote access trojan, similar to Crimson, that has been in use by Transparent Tribe since at least 2020.
Related
Uses · MITRE ATT&CK (14)
- T1074.001 Local Data Staging sub-technique
- T1204.001 Malicious Link sub-technique
- T1497.001 System Checks sub-technique
- T1027.003 Steganography sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1025 Data from Removable Media technique
- T1030 Data Transfer Size Limits technique
- T1033 System Owner/User Discovery technique
- T1057 Process Discovery technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1113 Screen Capture technique
- T1120 Peripheral Device Discovery technique
- T1125 Video Capture technique
Referenced by MITRE ATT&CK · uses (1)
- G0134 Transparent Tribe group
References
- https://blog.talosintelligence.com/2021/02/obliquerat-new-campaign.html Talos Oblique RAT March 2021
- https://blog.talosintelligence.com/2021/05/transparent-tribe-infra-and-targeting.html Talos Transparent Tribe May 2021