Action RAT

Action RAT is a remote access tool written in Delphi that has been used by SideCopy since at least December 2021 against Indian and Afghani government personnel.

View graph Watch Export

Indicators tracked

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

13 relationships

T1047: Windows Management Instrumentation

source

T1033: System Owner/User Discovery

source

T1082: System Information Discovery

source

T1005: Data from Local System

source

T1140: Deobfuscate/Decode Files or Information

source

T1016: System Network Configuration Discovery

source

T1083: File and Directory Discovery

source

T1027: Obfuscated Files or Information

source

T1518.001: Security Software Discovery

source

T1059.003: Windows Command Shell

source

T1071.001: Web Protocols

source

T1105: Ingress Tool Transfer

source