MITRE ATT&CKsoftware (malware)

S1094 BRATA

Published 2023-12-18 Modified 2024-04-17 Official page ↗
Domain
mobile
Platforms
Android
Version
1.0
Created
2023-12-18

Description

BRATA (Brazilian Remote Access Tool, Android), is an evolving Android malware strain, detected in late 2018 and again in late 2021. Originating in Brazil, BRATA was later also found in the UK, Poland, Italy, Spain, and USA, where it is believed to have targeted financial institutions such as banks. There are currently three known variants of BRATA.

Related

Uses · MITRE ATT&CK (27)

  • T1664 Exploitation for Initial Access technique
  • T1663 Remote Access Software technique
  • T1662 Data Destruction technique
  • T1660 Phishing technique
  • T1655.001 Match Legitimate Name or Location sub-technique
  • T1628.002 User Evasion sub-technique
  • T1641.001 Transmitted Data Manipulation sub-technique
  • T1417.001 Keylogging sub-technique
  • T1417.002 GUI Input Capture sub-technique
  • T1437.001 Web Protocols sub-technique
  • T1629.003 Disable or Modify Tools sub-technique
  • T1646 Exfiltration Over C2 Channel technique
  • T1418.001 Security Software Discovery sub-technique
  • T1406.002 Software Packing sub-technique
  • T1627.001 Geofencing sub-technique
  • T1630.001 Uninstall Malicious Application sub-technique
  • T1633.001 System Checks sub-technique
  • T1616 Call Control technique
  • T1532 Archive Collected Data technique
  • T1533 Data from Local System technique
  • T1516 Input Injection technique
  • T1513 Screen Capture technique
  • T1406 Obfuscated Files or Information technique
  • T1407 Download New Code at Runtime technique
  • T1426 System Information Discovery technique
  • T1430 Location Tracking technique
  • T1461 Lockscreen Bypass technique

References