TF-MAL-apk.goat_rat
📛 Threat Title
Malware family: GoatRAT
Description
ThreatFox malware family `apk.goat_rat`. Printable name: GoatRAT.
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (9)
-
web:bazaar.abuse.ch
Malware samples associated with tag goatrat MalwareBazaar Database Samples on MalwareBazaar are usually associated with certain tags. Every sample can associated with one or more tags. Using tags, it is easy to navigate through the huge amount of malware samples in the MalwareBazaar corpus. The page below gives you an overview on malware samples that are tagged with goatrat . Database Entry
-
web:cyble.com
GoatRAT was originally created as an Android Remote Administration Tool to seize control of a victim's device. However, a new version of GoatRAT functions as a Banking Trojan, specifically aimed at Brazilian banks.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the GoatRAT malware family including references, samples and yara signatures.
-
web:socprime.com
The article details a cryptomining campaign involving the redtail malware family , which is delivered through HTTP requests that exploit CVE-2024-4577 in PHP. Threat actors send Base64-encoded payloads that retrieve and run a self-replicating script named cve_2024_4577.selfrep.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.csidb.net
GoatRAT is an Android banking trojan that has been publicly identified by the alias GoatRAT and is associated with a known location in China according to available reporting. The malware functions as a remote administration tool that has been repurposed to conduct financial fraud by exploiting Brazil's Pix instant payment system. Its observed activity focuses on compromising Android devices ...
-
web:www.microsoft.com
Understand how this virus or malware spreads and how its payloads affects your computer. Protect against this threat, identify symptoms, and clean up or remove infections.
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
-
web:www.pcrisk.com
What kind of malware is goatRat ? goatRat is the name of a remote access trojan (RAT) - a malicious app that allows attackers to take control of an Android device. Malware of this type can provide attackers with access to sensitive information like messages, call logs, and photos, as well as the ability to execute commands, take screenshots, record audio, and video, etc. More about RATs like ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.