H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

P8RAT

[P8RAT](https://attack.mitre.org/software/S0626) is a fileless malware used by [menuPass](https://attack.mitre.org/groups/G0045) to download and execute payloads since at least 2020.(Citation: Securelist APT10 March 2021)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[P8RAT](https://attack.mitre.org/software/S0626) is a fileless malware used by [menuPass](https://attack.mitre.org/groups/G0045) to download and execute payloads since at least 2020.(Citation: Securelist APT10 March 2021)

Labels

malware
6 recorded

Relationships

uses
from menuPass
Group
uses
to Ingress Tool Transfer
Technique
uses
to Junk Data
Technique
uses
to Process Discovery
Technique
uses
to System Checks
Technique
uses
to Time Based Checks
Technique
4 external

References

mitre-attack
S0626
open
HEAVYPOT
—
GreetCake
—
Securelist APT10 March 2021
https://securelist.com/apt10-sophisticated-multi-layered-loader-ecipekac-discovered-in-a41apt-campaign/101519/
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance