ECCENTRICBANDWAGON
- ID
- S0593
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 25 Apr 2025
ECCENTRICBANDWAGON is a remote access Trojan (RAT) used by North Korean cyber actors that was first identified in August 2020. It is a reconnaissance tool--with keylogging and screen capture functionality--used for information gathering on compromised systems.[1]
Techniques used (6)
- T1027 Obfuscated Files or Information
- T1056.001 Keylogging
- T1059.003 Windows Command Shell
- T1070.004 File Deletion
- T1074.001 Local Data Staging
- T1113 Screen Capture