Turla__2020__ESET_Turla_ComRAT.pdf
ID: 3177fc70-4f4d-4bca-8c03-285bf496772d
STIX ID: report--3177fc70-4f4d-4bca-8c03-285bf496772d
Threat Score
85/100
Uploaded: 2026-08-19
Published Date: 2020-05-21
Last Modified Date: 2020-05-21
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
This report analyzes Turla's ComRAT v4 malware, tracing its evolution from Agent.BTZ, describing its architecture, Virtual FAT16 file system, dual command-and-control channels (HTTP and Gmail), and the techniques used to steal and exfiltrate documents from government targets, indicating ongoing activity into 2020.