216.73.216.6

AndroRAT

The MITRE Corporation · Published 25/10/2017 16:48 · Modified 27/03/2026 01:41 Family

Essential information

Confidence
100/100
Is family
Yes
Published
25/10/2017 16:48
Modified
27/03/2026 01:41
Revoked
No
Author / Source
The MITRE Corporation
Related entities
22 attack patterns (mitre), 2 intrusion sets (apt), 2 sectors, 4 countries, 58 indicators, 4 vulnerabilities (cve), 1 reports

Description

[AndroRAT](https://attack.mitre.org/software/S0292) is an open-source remote access tool for Android devices. [AndroRAT](https://attack.mitre.org/software/S0292) is capable of collecting data, such as device location, call logs, etc., and is capable of executing actions, such as sending SMS messages and taking pictures.(Citation: Lookout-EnterpriseApps)(Citation: github_androrat)(Citation: Forcepoint BITTER Pakistan Oct 2016) It is originally available through the `The404Hacking` Github repository.(Citation: github_androrat)

Marking (TLP)

TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.