S0126Windows

S0126ComRAT

Platforms
1
ATT&CK
14.1
References
4

Description

[ComRAT](https://attack.mitre.org/software/S0126) is a second stage implant suspected of being a descendant of [Agent.btz](https://attack.mitre.org/software/S0092) and used by [Turla](https://attack.mitre.org/groups/G0010). The first version of [ComRAT](https://attack.mitre.org/software/S0126) was identified in 2007, but the tool has undergone substantial development for many years since.(Citation: Symantec Waterbug)(Citation: NorthSec 2015 GData Uroburos Tools)(Citation: ESET ComRAT May 2020)

Platforms· 1

Windows

References

  1. https://attack.mitre.org/software/S0126
  2. https://www.welivesecurity.com/wp-content/uploads/2020/05/ESET_Turla_ComRAT.pdf
  3. https://docplayer.net/101655589-Tools-used-by-the-uroburos-actors.html
  4. https://www.threatminer.org/report.php?q=waterbug-attack-group.pdf&y=2015#gsc.tab=0&gsc.q=waterbug-attack-group.pdf&gsc.page=1

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
Agent.BTZ
Software
BBSRAT
Software
IronNetInjector
Software
GovRAT
Software
Mosquito
Software
Action RAT
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.