S0615 SombRAT

malwareEnterprise

platformsWindows

also known asSombRAT

SombRAT is a modular backdoor written in C++ that has been used since at least 2019 to download and execute malicious payloads, including FIVEHANDS ransomware.

01

techniques used (24)

ATT&CK techniques this enables or maps to.

02

used by campaigns (1)

Campaigns that use this.

03

source

Where this definition is published.

view on ATT&CK
scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan