S0253 RunningRAT

malwareEnterprise

platformsWindows

also known asRunningRAT

RunningRAT is a remote access tool that appeared in operations surrounding the 2018 Pyeongchang Winter Olympics along with Gold Dragon and Brave Prince.

techniques used (10)

ATT&CK techniques this enables or maps to.

T1056.001Keylogging
T1059.003Windows Command Shell
T1070.004File Deletion
T1082System Information Discovery
T1115Clipboard Data
T1547.001Registry Run Keys / Startup Folder
T1560Archive Collected Data
T1680Local Storage Discovery
T1685Disable or Modify Tools
T1685.005Clear Windows Event Logs

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan