APT44 Report

This ThreatMon report analyzes the Kapeka Backdoor attributed to APT44 (Sandworm), detailing its dropper and backdoor components, infection chain, persistence mechanisms, C2 communications, and JSON-based configuration, while providing IOCs, detection rules, and mitigation guidance to protect organizations from multi-stage malware employed by a known threat actor.