CapraRAT

Description

(Trend Micro) We observed this group using another Android RAT — TrendMicro has named this “CapraRat”— which is possibly a modified version of an open-source RAT called AndroRAT. While analyzing this android RAT, we saw several similar capabilities to the Crimson RAT malware that the group usually uses to infect Windows systems.

Names

Name
CapraRAT

Category

Malware

Type

• Backdoor

Information

• https://www.trendmicro.com/en_us/research/22/a/investigating-apt36-or-earth-karkaddans-attack-chain-and-malware.html

Malpedia

• https://malpedia.caad.fkie.fraunhofer.de/details/apk.capra_rat

Other Information

Uuid

0ea4bc6d-2ca2-407e-92ee-d0c07d3d9339

Last Card Change

2022-12-27