Qarallax RAT
- First seen
- 2015-05-01 00:00:00
- Malware type
- rat
- Family
- Malware family
- Profile updated
- 2026-07-07 14:32:19
Targeted industries: financial-services government-and-public-sector technology-and-telecommunications
Context
According to SpiderLabs, in May 2015 the "company" Quaverse offered a RAT known as Quaverse RAT or QRAT. At around May 2016, this QRAT evolved into another RAT which became known as Qarallax RAT, because its C2 is at qarallax.com. Quaverse also offers a service to encrypt Java payloads (Qrypter), and thus qrypted payloads are sometimes confused with Quaverse RATs (QRAT / Qarallax RAT).
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Jar.Qarallax Rat (report)
- certego.net — Nearly Undetectable Qarallax Rat Spreading Via Spam (report)