jRAT

Malware updated 22 days ago (2024-11-29T13:50:44.005Z)
Download STIX
Preview STIX
jrat is a type of malware designed to exploit and damage computer systems. It can infect a system through suspicious downloads, emails, or websites, often without the user's knowledge. Once inside, it can steal personal information, disrupt operations, or even hold data hostage for ransom. Symantec first spotted this version of jrat in early November 2017 and has recently observed a newer version of the cross-platform remote access Trojan (RAT) in the wild. This new version of jRAT includes several new capabilities and target platforms. Its configuration file, config.dat, can be decrypted using the AES key in key.dat. Versions of jRAT are using new tricks to evade parsing, detection, and prevent itself from being reverse-engineered. These new versions of jRAT have been reported to target Windows, Linux, and MAC operating systems, making it a threat to a wide range of devices. To protect against jrat, users should avoid downloading suspicious files, opening unknown emails, or clicking on suspicious links. Regularly updating antivirus software can also help detect and remove jrat infections. Additionally, users should stay informed about the latest threats and security vulnerabilities to ensure they are taking appropriate measures to secure their systems.
Description last updated: 2023-06-23T19:03:55.851Z
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the jRAT Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
MITRE
2 years ago