RAZOR_TIGER__2020__Copy_cat_of_APT_Sidewinder_._In_tweeter_this_weekend_Timele9527_by_Sebdraven_Medium.pdf

This report analyzes a targeted malware campaign initially suspected to be APT Sidewinder but likely a copycat using an Allakore_Remote Delphi backdoor delivered via HTA files hosted on vidyasagaracademybrg.in; it documents execution flow, persistence, cleartext C2 protocol samples, file paths, SHA/MD5 hashes, domain and IP indicators, and suggests targeting of Afghan/ICC-associated individuals.