P8RAT

MITRE ATT&CK: S0626 View on attack.mitre.org

Aliases: HEAVYPOT, GreetCake, P8RAT

First seen: 2020-01-01 00:00:00
Malware type: rat
Family: Malware family
Operating systems: windows
Profile updated: 2026-07-07 15:30:59

Targeted industries: government-and-public-sector technology-and-telecommunications

Targeted regions: country_code:jp country_code:us

Context

P8RAT is a fileless malware used by menuPass to download and execute payloads since at least 2020.

Detection coverage

79 Sigma rules

Malware & tools used

Time Based Checks (attack-pattern)
Process Discovery (attack-pattern)
Junk Data (attack-pattern)
System Checks (attack-pattern)
Ingress Tool Transfer (attack-pattern)

Used by threat actors

menuPass (threat-actor)

Reports & references

Kaspersky — 101519 (report)
MITRE ATT&CK — S0626 (report)

External references