Netskope Threat Labs

RATANKBA

ATP Sandbox Adv. Heuristics

Stats

First seen
June 2024
Last seen
October 2026

MITRE ATT&CK techniques

15 techniques across 4 tactics.

TA0002 Execution

TA0005 Stealth

TA0007 Discovery

  • T1007System Service Discovery
  • T1012Query Registry
  • T1016System Network Configuration Discovery
  • T1018Remote System Discovery
  • T1033System Owner/User Discovery
  • T1049System Network Connections Discovery
  • T1057Process Discovery
  • T1082System Information Discovery
  • T1087Account Discovery

TA0011 Command and Control

Associated groups

Alert name variants

Alert Name
Win32.Downloader.Ratankba

Related families

BazarCobalt StrikeEmpireQakBotTrickBot