MITRE ATT&CKsoftware (malware)

S1190 Kapeka

Published 2025-01-06 Modified 2025-03-11 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
KnuckleTouch
Version
1.0
Created
2025-01-06

Description

Kapeka is a backdoor written in C++ used against victims in Eastern Europe since at least mid-2022. Kapeka has technical overlaps with Exaramel for Windows and Prestige malware variants, both of which are linked to Sandworm Team. Kapeka may have been used in advance of Prestige deployment in late 2022.

Related

Uses · MITRE ATT&CK (14)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1036.008 Masquerade File Type sub-technique
  • T1070.009 Clear Persistence sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1218.011 Rundll32 sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1012 Query Registry technique
  • T1082 System Information Discovery technique
  • T1090 Proxy technique
  • T1106 Native API technique
  • T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (1)

  • G0034 Sandworm Team group

References