s2
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

TF-MAL-apk.rafelrat

📛 Threat Title

Malware family: Rafel RAT

Category: Rafel RAT First seen: Last updated: Source: ThreatFox Malwares

Description

ThreatFox malware family `apk.rafelrat`. Printable name: Rafel RAT.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

domain apk.rafelrat VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.rafelrat

IOC database

Type
domain
Value
apk.rafelrat
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
Extracted from Threat TF-MAL-apk.rafelrat

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.rafelrat

References (1)

Remediations (10)

  • Rafel RAT (Malware Family) - Fraunhofer
    web:malpedia.caad.fkie.fraunhofer.de

    Details for the Rafel RAT malware family including references, samples and yara signatures.

  • Rafel RAT, Android Malware from Espionage to Ransomware Operations
    web:research.checkpoint.com

    Rafel RAT is an open-source malware tool that operates stealthily on Android devices. It provides malicious actors with a powerful toolkit for remote administration and control, enabling a range of malicious activities from data theft to device manipulation.

  • Android Malware 'Rafel RAT' Evolves from Espionage Tool to Ransomware ...
    web:rewterz.com

    One such threat is the Rafel Remote Administration Tool ( RAT ), an open-source malware that offers malicious actors a robust toolkit for remote control and manipulation of Android devices. Rafel RAT's capabilities include remote access, data exfiltration, surveillance, and persistent control, making it a potent tool for cybercriminals.

  • Decoding Rafel RAT: Android Espionage And Ransomware Impact
    web:thecyberexpress.com

    Rafel RAT exemplifies the nature of Android malware , characterized by its open-source nature, extensive feature set, and widespread adoption in illicit activities. Vigilance and proactive security measures are essential to safeguard against its threats, ensuring continued protection of user privacy, data integrity, and organizational security in an increasingly interconnected digital world.

  • Multiple Threat Actors Deploying Open-Source Rafel RAT to Target ...
    web:thehackernews.com

    Learn about Rafel RAT , an Android malware tool posing as popular apps. Explore its risks, impacts, and preventive measures for mobile security.

  • Rafel RAT, Android Malware from Espionage to Ransomware Operations
    web:www.bisinfotech.com

    Check Point Research (CPR) has identified multiple campaigns that leverage Rafel , an open-source Remote Administration Tool ( RAT ) targeting Android phones (used by more than 3.9B people worldwide). We discovered the use of this Android malware in espionage (remote surveillance, data exfiltration) and ransomware operations.

  • Rafel RAT: A Pest Invading Droid Systems - Bitdefender
    web:www.bitdefender.com

    Rafel RAT : A Stealthy Threat to Android Devices Rafel RAT is an Android malware with an open-source design and the ability to camouflage its application type, often masking as a common BlackMart application.

  • Android Users Warned of Rising Malware Threat From Rafel RAT
    web:www.infosecurity-magazine.com

    Security researchers have warned against Rafel , an open-source remote administration tool ( RAT ) targeting Android devices. The investigation by Check Point Research (CPR) identified multiple threat actors exploiting Rafel RAT , including an espionage group, demonstrating the tool's versatility in achieving different malicious objectives.

  • Threat Actors Using Rafel RAT Malware To Target Android Phones - Techworm
    web:www.techworm.net

    According to an analysis by Antonis Terefos and Bohdan Melnykov at Check Point, Rafel , an open-source remote administration tool ( RAT ), was utilized by multiple threat actors, including cyber espionage groups, and identified around 120 different malicious campaigns. Rafel RAT is an open-source malware tool that operates covertly on Android devices. It provides malicious actors with a powerful ...

  • Unmasking Rafel RAT: Android Infiltration Campaign - Zimperium
    web:zimperium.com

    Rafel RAT is a type of malware specifically designed to grant cybercriminals unauthorized access to infected devices. Originating from the darknet, Rafel RAT has been available for sale on underground forums, making it accessible to a wide range of malicious actors.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.