SYMBOLCOMMON_NAMEaka. SYNONYMS
osx.orat (Back to overview)

oRAT


SentinelOne describes this as a malware written in Go, mixing own custom code with code from public repositories.

References
2022-05-23Trend MicroDaniel Lunghi, Jaromír Hořejší
Operation Earth Berberoka
reptile oRAT Ghost RAT PlugX pupy Earth Berberoka
2022-05-09Dinesh Devadoss, Phil Stokes
From the Front Lines | Unsigned macOS oRAT Malware Gambles For The Win
oRAT
2022-04-27TrendmicroDaniel Lunghi, Jaromír Hořejší
Operation Gambling Puppet
reptile oRAT AsyncRAT Cobalt Strike DCRat Ghost RAT PlugX Quasar RAT Trochilus RAT Earth Berberoka
2022-04-27TrendmicroTrendmicro
IOCs for Earth Berberoka - MacOS
oRAT Earth Berberoka

There is no Yara-Signature yet.