Woody Rat A New Feature Rich Malware Woody RAT | ThreatDown Woody RAT: A new feature-rich malware spotted in the wild
threatdown.com · 2 Aug 2022 · Licence: not cleared; local research copy only
CVEs this report names
1 CVE- CVE-2022-30190Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityMicrosoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1105Ingress Tool Transfer4 reports99.2%Top 0.07%87.4priority
Where it names them
CVE-2022-30190 Original (opens in a new tab) ↗
The threat actor is using a Microsoft Office document (Памятка.docx) that has weaponized with the Follina (CVE-2022-30190) vulnerability to drop Woody Rat.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.