Ratankba

Description

(Trend Micro) During our analysis, we collected a copy of the RATANKBA malware’s Lazarus Remote Controller tool. The remote controller provides a user interface that allows attackers to send jobs to any compromised endpoint. The controller gives the attackers the ability to manipulate the victims’ host by queueing tasks on the main server. RATANKBA retrieves and executes the tasks, and retrieves the collected information.

Names

Name
Ratankba
Ratabanka
QUICKRIDE

Category

Malware

Type

  • Backdoor
  • Info stealer

Information

Mitre Attack

Malpedia

Alienvault Otx

Other Information

Uuid

86175fff-3f01-49ba-8057-ef28c8f619c9

Last Card Change

2022-12-29