RARSTONE — Malware Profile
RARSTONE is malware used by the Naikon group that has some characteristics similar to PlugX.
MITRE ATT&CK techniques (4)
- T1055.001 Dynamic-link Library Injection
- T1083 File and Directory Discovery
- T1095 Non-Application Layer Protocol
- T1105 Ingress Tool Transfer