216.73.217.22

ElizaRAT

AlienVault · Published 21/12/2025 01:11 · Modified 21/12/2025 01:11

Essential information

Confidence
100/100
Is family
No
Published
21/12/2025 01:11
Modified
21/12/2025 01:11
Revoked
No
Author / Source
AlienVault
Related entities
29 attack patterns (mitre), 1 intrusion sets (apt), 3 sectors, 3 countries, 40 indicators, 1 reports

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.

Attack patterns (MITRE) (29)

  • T1547 uses
    Boot or Logon Autostart Execution
  • T1071 uses
    Application Layer Protocol
  • T1518.001 uses
    Security Software Discovery
  • T1033 uses
    System Owner/User Discovery
  • T1078 uses
    Valid Accounts
  • T1204.002 uses
    Malicious File
  • T1057 uses
    Process Discovery
  • T1053.005 uses
    Scheduled Task
  • T1036 uses
    Masquerading
  • T1127 uses
    Trusted Developer Utilities Proxy Execution
  • T1083 uses
    File and Directory Discovery
  • T1059.001 uses
    PowerShell
  • T1218 uses
    System Binary Proxy Execution
  • T1566 uses
    Phishing
  • T1016 uses
    System Network Configuration Discovery
  • T1547.001 uses
    Registry Run Keys / Startup Folder
  • T1105 uses
    Ingress Tool Transfer
  • T1564 uses
    Hide Artifacts
  • T1102 uses
    Web Service
  • T1566.001 uses
    Spearphishing Attachment
  • T1140 uses
    Deobfuscate/Decode Files or Information
  • T1176 uses
    Software Extensions
  • T1119 uses
    Automated Collection
  • T1027 uses
    Obfuscated Files or Information
  • T1567 uses
    Exfiltration Over Web Service
  • T1574 uses
    Hijack Execution Flow
  • T1113 uses
    Screen Capture
  • T1082 uses
    System Information Discovery
  • T1134 uses
    Access Token Manipulation

Intrusion sets (APT) (1)

  • Transparent Tribe uses COPPER FIELDSTONEMythic Leopard
    The MITRE Corporation Confidence 100

    [Transparent Tribe](https://attack.mitre.org/groups/G0134) is a suspected Pakistan-based threat group that has been active since at least 2013, primarily targeting diplomatic, defense, and research organizations in India and Afghanistan.(Citation: Proofpoint …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 27/03/2026 01:13

Sectors (3)

  • Government targets
  • Education targets
  • Defense targets

Countries (3)

  • India targets
  • Pakistan targets
  • British Indian Ocean Territory targets

Indicators (40)

Reports (1)