ECCENTRICBANDWAGON — Malware Profile

ECCENTRICBANDWAGON is a remote access Trojan (RAT) used by North Korean cyber actors that was first identified in August 2020. It is a reconnaissance tool--with keylogging and screen capture functionality--used for information gathering on compromised systems.

MITRE ATT&CK techniques (6)

• T1027 Obfuscated Files or Information
• T1056.001 Keylogging
• T1059.003 Windows Command Shell
• T1070.004 File Deletion
• T1074.001 Local Data Staging
• T1113 Screen Capture

Attributed threat actors

• APT38
• Lazarus Group

Read the full analysis on IntelFusions