ROKRAT (a3479628-af0b-4088-8d2a-fafa384731dd)
ROKRAT is a cloud-based remote access tool (RAT) used by APT37 to target victims in South Korea. APT37 has used ROKRAT during several campaigns from 2016 through 2021.[Talos ROKRAT][Talos Group123][Volexity InkySquid RokRAT August 2021]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| APT37 (013fdfdc-aa32-4779-8f6e-7920615cbf66) | Tidal Groups | ROKRAT (a3479628-af0b-4088-8d2a-fafa384731dd) | Tidal Software | 1 |