ArtraDownloader
Description
(Palo Alto) Overall, the ArtraDownloader malware family is not sophisticated, leveraging simple registry keys for persistence and HTTP requests to download and execute a remote file. Important strings within these samples are obfuscated by adding or subtracting from each byte within a string. This same obfuscation routine is used when sending data via HTTP.
This downloader has frequently been observed downloading the Remote Access Trojan (RAT) BitterRAT which is associated with BITTER threat operations.
Names
| Name |
|---|
| ArtraDownloader |
| Artra Downloader |
Category
Malware
Type
- Downloader
Information
Malpedia
Alienvault Otx
Other Information
Uuid
b8d91e49-6460-40aa-9a70-28398600fb95
Last Card Change
2022-12-28