RunningRATâs Next Move: From Remote Access to Crypto Mining for Profit
ID: 20ce8113-87a2-533e-8c81-1a754663884b
STIX ID: report--20ce8113-87a2-533e-8c81-1a754663884b
Feed Name: Hunt.io Blog
Threat Score
This report analyzes RunningRAT samples found in public open directories and linked C2 infrastructure, documenting how the RAT is used to stage cryptocurrency miners (XMRig) and credential-stealing tools. It includes execution and persistence details, PCAP-derived C2 communication characteristics, open-directory hosting IPs and domains, and a list of file and network observables for threat monitoring.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.