MITRE ATT&CKsoftware (malware)
S1095 AhRat
- Domain
- mobile
- Platforms
- Android
- Version
- 1.0
- Created
- 2023-12-18
Description
AhRat is an Android remote access tool based on the open-source AhMyth remote access tool. AhRat initially spread in August 2022 on the Google Play Store via an update containing malicious code to the previously benign application, “iRecorder – Screen Recorder,” which itself was released in September 2021.
Related
Uses · MITRE ATT&CK (15)
- T1437.001 Web Protocols sub-technique
- T1636.002 Call Log sub-technique
- T1636.003 Contact List sub-technique
- T1646 Exfiltration Over C2 Channel technique
- T1624.001 Broadcast Receivers sub-technique
- T1582 SMS Control technique
- T1533 Data from Local System technique
- T1521 Encrypted Channel technique
- T1513 Screen Capture technique
- T1398 Boot or Logon Initialization Scripts technique
- T1406 Obfuscated Files or Information technique
- T1420 File and Directory Discovery technique
- T1426 System Information Discovery technique
- T1429 Audio Capture technique
- T1430 Location Tracking technique