MITRE ATT&CKsoftware (tool)
S1087 AsyncRAT
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2023-09-20
Description
AsyncRAT is an open-source remote access tool originally available through the NYANxCAT Github repository that has been used in malicious campaigns.
Related
Uses · MITRE ATT&CK (20)
- T1680 Local Storage Discovery technique
- T1622 Debugger Evasion technique
- T1090.003 Multi-hop Proxy sub-technique
- T1564.003 Hidden Window sub-technique
- T1204.002 Malicious File sub-technique
- T1568 Dynamic Resolution technique
- T1568.002 Domain Generation Algorithms sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1497.001 System Checks sub-technique
- T1566.001 Spearphishing Attachment sub-technique
- T1056.001 Keylogging sub-technique
- T1053.005 Scheduled Task sub-technique
- T1016 System Network Configuration Discovery technique
- T1033 System Owner/User Discovery technique
- T1057 Process Discovery technique
- T1105 Ingress Tool Transfer technique
- T1106 Native API technique
- T1113 Screen Capture technique
- T1124 System Time Discovery technique
- T1125 Video Capture technique
References
- https://telefonicatech.com/blog/snip3-investigacion-malware Telefonica Snip3 December 2021
- https://blog.morphisec.com/revealing-the-snip3-crypter-a-highly-evasive-rat-loader Morphisec Snip3 May 2021
- https://blog.talosintelligence.com/operation-layover-how-we-tracked-attack/ Cisco Operation Layover September 2021