MITRE ATT&CKsoftware (malware)

S0134 Downdelph

Published 2017-05-31 Modified 2025-04-25 Official page ↗

Domain: enterprise
Platforms: Windows
Aliases: Delphacy
Version: 1.2
Created: 2017-05-31

Description

Downdelph is a first-stage downloader written in Delphi that has been used by APT28 in rare instances between 2013 and 2015.

Related

Uses · MITRE ATT&CK (5)

T1573.001 Symmetric Cryptography sub-technique
T1001.001 Junk Data sub-technique
T1574.001 DLL sub-technique
T1548.002 Bypass User Account Control sub-technique
T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

G0007 APT28 group

References

http://www.welivesecurity.com/wp-content/uploads/2016/10/eset-sednit-part3.pdf ESET Sednit Part 3