SQLRat

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[SQLRat](https://attack.mitre.org/software/S0390) is malware that executes SQL scripts to avoid leaving traditional host artifacts. [FIN7](https://attack.mitre.org/groups/G0046) has been observed using it.(Citation: Flashpoint FIN 7 March 2019)

Associated Techniques (8)

ID	ATT&CK	Tactics
T1027.010	Command Obfuscation	-
T1053.005	Scheduled Task	-
T1059.001	PowerShell	-
T1059.003	Windows Command Shell	-
T1070.004	File Deletion	-
T1105	Ingress Tool Transfer	-
T1140	Deobfuscate/Decode Files or Information	-
T1204.002	Malicious File	-

Used by Actors (1)

FIN7
Criminal

Metadata

ID:	407
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00