Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 00:37:37 UTC
Home > List all groups > List all tools > List all groups using tool ExileRAT
 Tool: ExileRAT
Names
ExileRAT
Exile RAT
Category Malware
Type Reconnaissance, Backdoor, Info stealer, Exfiltration
Description
(Talos) ExileRAT is a simple RAT platform capable of getting information on the system
(computer name, username, listing drives, network adapter, process name),
getting/pushing files and executing/terminating processes.
Information
<https://blog.talosintelligence.com/2019/02/exilerat-shares-c2-with-luckycat.html>
<https://www.proofpoint.com/us/blog/threat-insight/chinese-apt-ta413-resumes-targeting-tibet-following-covid-19-themed-economic>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.exilerat>
AlienVault OTX <https://otx.alienvault.com/browse/pulses?q=tag:ExileRAT>
Last change to this tool card: 28 December 2022
Download this tool card in JSON format
All groups using tool ExileRAT
Changed Name Country Observed
APT groups
  TA413 2019-2022  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f270b69d-3383-4679-adb2-aa1f2ce2edef
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f270b69d-3383-4679-adb2-aa1f2ce2edef
Page 1 of 1