Search/Woody RAT
● Malware

Woody RAT

Woody RAT is a remote access trojan (RAT) that has been used since at least August 2021 against Russian organizations.

View graph Watch Export
Indicators tracked
0
Intelligence Reports10
10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
30 relationships
T1113: Screen Capture
source
T1033: System Owner/User Discovery
source
T1027.013: Encrypted/Encoded File
source
T1016.001: Internet Connection Discovery
source
T1204.002: Malicious File
source
T1573.001: Symmetric Cryptography
source
T1566.001: Spearphishing Attachment
source
T1082: System Information Discovery
source
T1106: Native API
source
T1005: Data from Local System
source
T1140: Deobfuscate/Decode Files or Information
source
T1055: Process Injection
source
T1016: System Network Configuration Discovery
source
T1087: Account Discovery
source
T1083: File and Directory Discovery
source
T1057: Process Discovery
source
T1041: Exfiltration Over C2 Channel
source
T1059.001: PowerShell
source
T1055.012: Process Hollowing
source
T1685: Disable or Modify Tools
source
T1203: Exploitation for Client Execution
source
T1573.002: Asymmetric Cryptography
source
T1012: Query Registry
source
T1518.001: Security Software Discovery
source
T1059.003: Windows Command Shell
source
T1070.004: File Deletion
source
T1071.001: Web Protocols
source
T1518: Software Discovery
source
T1105: Ingress Tool Transfer
source
T1680: Local Storage Discovery
source