aol.pm

RunningRAT

Software · ATTACK:enterprise:S0253

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0253",
  "title": "RunningRAT",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0253",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--60d50676-459a-47dd-92e9-a827a9fe9c58",
  "external_id": "S0253",
  "domain": "enterprise",
  "created": "2018-10-17T00:14:20.652Z",
  "modified": "2025-10-22T03:02:12.918Z",
  "version": "1.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "RunningRAT"
    },
    {
      "source_name": "McAfee Gold Dragon",
      "url": "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/gold-dragon-widens-olympics-malware-attacks-gains-permanent-presence-on-victims-systems/"
    }
  ]
}

Explicit source assertions (10)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0253 → uses → ATTACK:enterprise:T1680

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--082a573f-d760-4bd8-a830-8c5a57b4ea44

McAfee Gold Dragon

ATTACK:enterprise:S0253 → uses → ATTACK:enterprise:T1685

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2471f5b2-7d7a-4df3-99d0-18e05aec0f4d

McAfee Gold Dragon

ATTACK:enterprise:S0253 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4a0c3e46-f94c-48b5-b094-a8f9437857fb

McAfee Gold Dragon

ATTACK:enterprise:S0253 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5375b22d-1da8-4178-b728-5b91b6917a5c

McAfee Gold Dragon

ATTACK:enterprise:S0253 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7d1d4ffd-7c60-4a83-bcfa-66413bbe7212

McAfee Gold Dragon

ATTACK:enterprise:S0253 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--83185e47-895c-4c40-8043-fbf279006873

McAfee Gold Dragon

ATTACK:enterprise:S0253 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b1c307de-b924-4332-b8db-3c371e46430e

McAfee Gold Dragon

ATTACK:enterprise:S0253 → uses → ATTACK:enterprise:T1560

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b997d866-0aef-4ba6-a812-cfa2fccb05af

McAfee Gold Dragon

ATTACK:enterprise:S0253 → uses → ATTACK:enterprise:T1685.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c07f4012-d5dc-4039-9d5c-7487c501188f

McAfee Gold Dragon

ATTACK:enterprise:S0253 → uses → ATTACK:enterprise:T1115

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d4f4974e-7918-4829-8379-5e2e98f2ae20

McAfee Gold Dragon

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.