Malware: Downdelph

Description

[Downdelph](https://attack.mitre.org/software/S0134) is a first-stage downloader written in Delphi that has been used by [APT28](https://attack.mitre.org/groups/G0007) in rare instances between 2013 and 2015. (Citation: ESET Sednit Part 3)

External References

• mitre-attack
• ESET Sednit Part 3

Techniques Used by This Malware

• T1001.001 — Junk Data
• T1105 — Ingress Tool Transfer
• T1548.002 — Bypass User Account Control
• T1573.001 — Symmetric Cryptography
• T1574.001 — DLL

APT Groups Using This Malware

• APT28