SYMBOLCOMMON_NAMEaka. SYNONYMS
win.spank_rat (Back to overview)

SpankRAT


According to ANY.RUN, this RAT is written in Rust. SpankRAT communicates with its C2 over WebSockets and provides full remote access to the system. The full-featured variant supports 18 commands covering remote shell execution, file management (list/read/upload/delete/rename), process enumeration and killing, Windows service control (start/stop/restart), full registry CRUD, scheduled task manipulation, and software inventory.

References
2026-04-16Twitter (@anyrun_app)Achmad Adhikara, GridGuardGhoul
Tweet about SpankRat
SpankRAT

There is no Yara-Signature yet.