Malware: RARSTONE

Description

[RARSTONE](https://attack.mitre.org/software/S0055) is malware used by the [Naikon](https://attack.mitre.org/groups/G0019) group that has some characteristics similar to [PlugX](https://attack.mitre.org/software/S0013). (Citation: Aquino RARSTONE)

External References

• mitre-attack
• Aquino RARSTONE

Techniques Used by This Malware

• T1055.001 — Dynamic-link Library Injection
• T1083 — File and Directory Discovery
• T1095 — Non-Application Layer Protocol
• T1105 — Ingress Tool Transfer

APT Groups Using This Malware

• Naikon