KOPILUWAK
Essential information
- Confidence
- 100/100
- Is family
- Yes
- Published
- 17/05/2023 20:49
- Modified
- 27/03/2026 01:03
- Revoked
- No
- Author / Source
- The MITRE Corporation
- Related entities
- 40 attack patterns (mitre), 3 intrusion sets (apt), 1 sectors, 7 countries, 96 indicators, 1 campaign, 1 campaigns
Description
Marking (TLP)
TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
External references
Related entities
Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.
Attack patterns (MITRE) (40)
Intrusion sets (APT) (3)
-
Tomiris usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
The MITRE Corporation Confidence 100
[Turla](https://attack.mitre.org/groups/G0010) is a cyber espionage threat group that has been attributed to Russia's Federal Security Service (FSB). They have compromised victims in over 50 countries since at least…
First seen 01/01/1970 · Last seen 16/11/5138 · -
Turla, UNC4210 usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
Sectors (1)
-
Government targets
Countries (7)
-
Belarus targets
-
Ukraine targets
-
Kazakhstan targets
-
Russian Federation targets
-
Afghanistan targets
-
Tajikistan targets
-
Kyrgyzstan targets
Indicators (96)
-
mail.lechateaudelatour.frindicatesstix 100/100 Revoked· Valid until 31/12/2024 · Source: AlienVault -
stix 100/100 Revoked
Win64:Trojan-gen SHA256 of 292c3602eb0213c9a0123fdaae522830de3fad95
· Valid until 27/07/2024 · Source: AlienVault -
stix 100/100 Revoked
Win64:Trojan-gen SHA256 of 02c37ccdfccfe03560a4bf069f46e8ae3a5d2348
· Valid until 21/12/2024 · Source: AlienVault -
stix 100/100 Revoked· Valid until 21/12/2024 · Source: AlienVault
-
www.simplifiedhomesales.comindicatesstix 100/100 Revoked· Valid until 31/12/2024 · Source: AlienVault -
stix 100/100 Revoked
ALFPER:Trojan:MSIL/Kapooshka.B!dha SHA256 of 902b27a5fd2e5f17e5340e350afa037549ce9faa
· Valid until 21/12/2024 · Source: AlienVault -
stix 100/100 Revoked
SHA256 of 36bba4d26ecf02623a51c6241133c4290551e27f
· Valid until 21/12/2024 · Source: AlienVault -
stix 100/100 Revoked
research_pe_signed_outside_timestamp SHA256 of c1b7547da13b7c78cd6c5c354af945b2eff767c9
· Valid until 27/07/2024 · Source: AlienVault -
suckmycocklameavindustry.inindicatesstix 100/100 Revoked· Valid until 30/09/2025 · Source: AlienVault -
stix 100/100 Revoked· Valid until 21/12/2024 · Source: AlienVault
-
stix 100/100 Revoked
SHA256 of f8d87d5b251671af624c3eaf7ac5cc42a0acadd0
· Valid until 27/07/2024 · Source: AlienVault -
stix 100/100 Revoked· Valid until 10/06/2023 · Source: AlienVault
Campaign (1)
-
C0026 uses
Campaigns (1)
-
C0026