Skip to content
MalwareWiki

RAT

EtherRAT

According to sysdig, EtherRAT uses Ethereum smart contracts for C2 URL resolution.

EtherRAT is a JavaScript rat.

Background

Sysdig reports that EtherRAT relies on Ethereum smart contracts to resolve its C2 URLs. It secures persistence via five separate mechanisms (systemd, xdg, cron, bashrc, profile), letting it survive reboots and routine system maintenance.

Source: Malpedia (Fraunhofer FKIE).