threatmon.ioPDF
APT44 Report
Excerpt
DETAILED ANALYSIS
BY APT44
TABLE OF CONTENTS
Introduction 4
What is Kapeka Backdoor?
Countries Targeted by APT44 (Sandworm)
Infection Chain
Backdoor Analysis
Backdoor Dropper Analysis
IOCs
Mitre Attack
Detection
Mitigation
Dropper Yara Rule
Technical Analysis
Backdoor Yara Rule
5
6
7
8
8
12
17
18
19
19
20
21
22Uncover the Advantages of the ThreatMon’s Module Offerings Get 30 Days Free Trial
4
Introduction
This report focuses on a technical analysis
of the origins, propagation methods, and
activities of the recently discovered
Kapeka Backdoor. In particular, a detailed
examination and evaluation of the Kapeka
Backdoor attributed to the Russian
Sandworm Group was conducte…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by threatmon.io on threatmon.io.
Mentioned in the excerpt
More from threatmon.io1
- The Konni APT Chronicle: Tracing Their Intelligence-Driven Attack Chainthreatmon.io · Published 18 Oct 2024
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Animal Farm APT and the Shadow of French IntelligenceInfosec Institute · Published 8 Jul 2015
- Darktrace Malware Analysis: Unpacking SnappyBeeDarktrace · Published 3 Feb
