RunningRAT

ATP Sandbox Adv. Heuristics

Stats

First seen: May 2023
Last seen: October 2026

MITRE ATT&CK techniques

10 techniques across 6 tactics.

TA0002 Execution

T1059Command and Scripting Interpreter
- T1059.003Windows Command Shell

TA0003 Persistence

T1547Boot or Logon Autostart Execution
- T1547.001Registry Run Keys / Startup Folder

TA0005 Stealth

T1070Indicator Removal
- T1070.004File Deletion

TA0007 Discovery

T1082System Information Discovery
T1680Local Storage Discovery

TA0009 Collection

T1056Input Capture
- T1056.001Keylogging
T1115Clipboard Data
T1560Archive Collected Data

TA0112 Defense Impairment

T1685Disable or Modify Tools
- T1685.005Clear Windows Event Logs

Alert name variants

Alert Name	Engine
Win32.Trojan.RunningRAT	ATP Sandbox Adv. Heuristics

Related families

DarkGate KONNI Metamorfo Qilin Agent Tesla