Skip to content

RAT

EpicSplit RAT

EpicSplit RAT is a multiplatform Java RAT that is capable of running shell commands, downloading, uploading, and executing files, manipulating the file system, establishing persistence, taking screens

EpicSplit RAT is a Java rat.

Background

EpicSplit RAT is a cross-platform Java RAT whose features include executing shell commands, downloading, uploading, and running files, altering the file system, gaining persistence, capturing screenshots, and simulating keyboard and mouse input. Operators usually obfuscate it with the commercial Allatori Obfuscator. A notable characteristic is that the TCP messages it sends to its C2 are delimited by the trailing string "packet".


Source: Malpedia (Fraunhofer FKIE).