Skip to content
MalwareWiki

RAT

PowerRatankba

aka QUICKRIDE.POWER

QUICKRIDE.POWER is a PowerShell variant of the QUICKRIDE backdoor.

PowerRatankba, also known as QUICKRIDE.POWER, is a Windows rat operated by Lazarus Group.

Background

QUICKRIDE.POWER is a PowerShell-based version of the QUICKRIDE backdoor. Its payloads are frequently written to C:\windows\temp\

Source: Malpedia (Fraunhofer FKIE).