NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/RDAT
● Malware

RDAT

RDAT is a backdoor used by the suspected Iranian threat group OilRig. RDAT was originally identified in 2017 and targeted companies in the telecommunications sector.

View graph Watch Export
Indicators tracked
0
Intelligence Reports10
10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
21 relationships
T1113: Screen Capture
source
T1132.001: Standard Encoding
source
T1071.004: DNS
source
T1036.005: Match Legitimate Resource Name or Location
source
T1573.001: Symmetric Cryptography
source
T1543.003: Windows Service
source
T1140: Deobfuscate/Decode Files or Information
source
T1071.003: Mail Protocols
source
T1036.004: Masquerade Task or Service
source
T1041: Exfiltration Over C2 Channel
source
T1001: Data Obfuscation
source
T1027.003: Steganography
source
T1030: Data Transfer Size Limits
source
T1059.003: Windows Command Shell
source
T1132.002: Non-Standard Encoding
source
T1070.004: File Deletion
source
T1071.001: Web Protocols
source
T1105: Ingress Tool Transfer
source
T1001.002: Steganography
source
T1008: Fallback Channels
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon