216.73.217.22

GravityRAT - S0237

AlienVault · Published 20/12/2025 19:44 · Modified 21/12/2025 04:47

Essential information

Confidence
100/100
Is family
No
Published
20/12/2025 19:44
Modified
21/12/2025 04:47
Revoked
No
Author / Source
AlienVault
Related entities
29 attack patterns (mitre), 3 sectors, 2 countries, 100 indicators, 2 reports

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.

Attack patterns (MITRE) (29)

  • T1083 uses
    File and Directory Discovery
  • T1046 uses
    Network Service Discovery
  • T1059 uses
    Command and Scripting Interpreter
  • T1608 uses
    Stage Capabilities
  • T1486 uses
    Data Encrypted for Impact
  • T1566 uses
    Phishing
  • T1012 uses
    Query Registry
  • T1592 uses
    Gather Victim Host Information
  • T1053 uses
    Scheduled Task/Job
  • T1555 uses
    Credentials from Password Stores
  • T1056 uses
    Input Capture
  • T1190 uses
    Exploit Public-Facing Application
  • T1021 uses
    Remote Services
  • T1078 uses
    Valid Accounts
  • T1588 uses
    Obtain Capabilities
  • T1573 uses
    Encrypted Channel
  • T1018 uses
    Remote System Discovery
  • T1189 uses
    Drive-by Compromise
  • T1557 uses
    Adversary-in-the-Middle
  • Search Closed Sources uses
    T1597
  • T1569 uses
    System Services
  • T1082 uses
    System Information Discovery
  • T1489 uses
    Service Stop
  • T1598 uses
    Phishing for Information
  • T1133 uses
    External Remote Services
  • T1204 uses
    User Execution
  • T1583 uses
    Acquire Infrastructure
  • T1016 uses
    System Network Configuration Discovery
  • T1518 uses
    Software Discovery

Sectors (3)

  • Government targets
  • Technology targets
  • Finance targets

Countries (2)

  • British Indian Ocean Territory targets
  • India targets

Indicators (100)

Reports (2)