RunningRAT — Malware Profile

RunningRAT is a remote access tool that appeared in operations surrounding the 2018 Pyeongchang Winter Olympics along with Gold Dragon and Brave Prince.

MITRE ATT&CK techniques (10)

• T1056.001 Keylogging
• T1059.003 Windows Command Shell
• T1070.004 File Deletion
• T1082 System Information Discovery
• T1115 Clipboard Data
• T1547.001 Registry Run Keys / Startup Folder
• T1560 Archive Collected Data
• T1680 Local Storage Discovery
• T1685 Disable or Modify Tools
• T1685.005 Clear Windows Event Logs

Read the full analysis on IntelFusions