AndroRAT is malware that allows a third party to control the device and collect information. [1]

ID: S0292
Version: 1.0
Created: 25 October 2017
Last Modified: 24 October 2022

Techniques Used

Domain ID Name Use
Mobile T1429 Audio Capture

AndroRAT gathers audio from the microphone.[1]

Mobile T1430 Location Tracking

AndroRAT tracks the device location.[1]

Mobile T1636 .002 Protected User Data: Call Log

AndroRAT collects call logs.[1]

.003 Protected User Data: Contact List

AndroRAT collects contact list information.[1]

.004 Protected User Data: SMS Messages

AndroRAT captures SMS messages.[1]