AndroRAT is malware that allows a third party to control the device and collect information. [1]

ID: S0292
Platforms: Android
Version: 1.1
Created: 25 October 2017
Last Modified: 11 December 2018

Techniques Used

Domain ID Name Use
Mobile T1433 Access Call Log

AndroRAT collects call logs.[1]

Mobile T1432 Access Contact List

AndroRAT collects contact list information.[1]

Mobile T1429 Capture Audio

AndroRAT gathers audio from the microphone.[1]

Mobile T1412 Capture SMS Messages

AndroRAT captures SMS messages.[1]

Mobile T1430 Location Tracking

AndroRAT tracks the device location.[1]