Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-02 12:47:21 UTC
Home > List all groups > List all tools > List all groups using tool CapraRAT
 Tool: CapraRAT
Names CapraRAT
Category Malware
Type Backdoor
Description
(Trend Micro) We observed this group using another Android RAT — TrendMicro has named
this “CapraRat”— which is possibly a modified version of an open-source RAT called
AndroRAT. While analyzing this android RAT, we saw several similar capabilities to the
Crimson RAT malware that the group usually uses to infect Windows systems.
Information
<https://www.trendmicro.com/en_us/research/22/a/investigating-apt36-or-earth-karkaddans-attack-chain-and-malware.html>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/apk.capra_rat>
Last change to this tool card: 27 December 2022
Download this tool card in JSON format
All groups using tool CapraRAT
Changed Name Country Observed
APT groups
  Transparent Tribe, APT 36 2013-Mar 2025  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=0ea4bc6d-2ca2-407e-92ee-d0c07d3d9339
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=0ea4bc6d-2ca2-407e-92ee-d0c07d3d9339
Page 1 of 1