Skip to content
MalwareWiki

Malware

Ratankba

aka QUICKRIDE

This is a backdoor that establishes persistence using the Startup folder.

This is a backdoor that establishes persistence using the Startup folder. It communicates to its C&C server using HTTPS and a static HTTP User-Agent string. QUICKRIDE is capable of gathering information about the system, downloading and loading executables, and uninstalling itself. It was leveraged against banks in Poland.

Family metadata imported from Malpedia (Fraunhofer FKIE).