Malware: RunningRAT

Description

[RunningRAT](https://attack.mitre.org/software/S0253) is a remote access tool that appeared in operations surrounding the 2018 Pyeongchang Winter Olympics along with [Gold Dragon](https://attack.mitre.org/software/S0249) and [Brave Prince](https://attack.mitre.org/software/S0252). (Citation: McAfee Gold Dragon)

External References

• mitre-attack
• McAfee Gold Dragon

Techniques Used by This Malware

• T1056.001 — Keylogging
• T1059.003 — Windows Command Shell
• T1070.001 — Clear Windows Event Logs
• T1070.004 — File Deletion
• T1082 — System Information Discovery
• T1115 — Clipboard Data
• T1547.001 — Registry Run Keys / Startup Folder
• T1560 — Archive Collected Data
• T1562.001 — Disable or Modify Tools