aol.pm

NavRAT

Software · ATTACK:enterprise:S0247

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0247",
  "title": "NavRAT",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0247",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--53a42597-1974-4b8e-84fd-3675e8992053",
  "external_id": "S0247",
  "domain": "enterprise",
  "created": "2018-10-17T00:14:20.652Z",
  "modified": "2025-04-25T14:43:20.237Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "NavRAT"
    },
    {
      "source_name": "Talos NavRAT May 2018",
      "url": "https://blog.talosintelligence.com/2018/05/navrat.html"
    }
  ]
}

Explicit source assertions (10)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0247 → uses → ATTACK:enterprise:T1074.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1784577e-9d82-497b-aba1-bc4d5a23d8f8

Talos NavRAT May 2018

ATTACK:enterprise:S0247 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5b48c2b1-0ce7-4856-9bc7-ae359826550c

Talos NavRAT May 2018

ATTACK:enterprise:S0247 → uses → ATTACK:enterprise:T1071.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5d1d94e9-c0fd-421f-867f-1a426b0dff99

Talos NavRAT May 2018

ATTACK:enterprise:S0247 → uses → ATTACK:enterprise:T1055

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--81bace85-005e-4edd-bb71-ca7a57bc8a07

Talos NavRAT May 2018

ATTACK:enterprise:S0247 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8a00aa55-b7b2-4df5-902b-d01bfdf89089

Talos NavRAT May 2018

ATTACK:enterprise:S0247 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9818eeca-be12-4dd3-bf9f-e33d5b409248

Talos NavRAT May 2018

ATTACK:enterprise:S0247 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a2440552-4190-4f72-9cf5-a63eecdff2fb

Talos NavRAT May 2018 · Talos NavRAT May 2018

ATTACK:enterprise:S0247 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b28c7fbf-05c6-4be2-9f17-3dcc722cee7c

Talos NavRAT May 2018

ATTACK:enterprise:S0247 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b9e42e0a-e779-4491-b107-a064254a7da3

Talos NavRAT May 2018

ATTACK:enterprise:G0067 → uses → ATTACK:enterprise:S0247

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e6f81b9c-8fda-49f5-a944-265f5bad82ba

Talos NavRAT May 2018

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.