ObliqueRAT — Malware Profile

ObliqueRAT is a remote access trojan, similar to Crimson, that has been in use by Transparent Tribe since at least 2020.

MITRE ATT&CK techniques (14)

• T1025 Data from Removable Media
• T1027.003 Steganography
• T1030 Data Transfer Size Limits
• T1033 System Owner/User Discovery
• T1057 Process Discovery
• T1074.001 Local Data Staging
• T1082 System Information Discovery
• T1083 File and Directory Discovery
• T1113 Screen Capture
• T1120 Peripheral Device Discovery
• T1125 Video Capture
• T1204.001 Malicious Link
• T1497.001 System Checks
• T1547.001 Registry Run Keys / Startup Folder

Attributed threat actors

• Transparent Tribe

Read the full analysis on IntelFusions