APT15__2020__Intezer_-_The_Evolution_of_APT15_s_Codebase_2020.pdf
ID: f6c16736-bc02-4f1e-a611-fd1be2ec9ae7
STIX ID: report--f6c16736-bc02-4f1e-a611-fd1be2ec9ae7
Threat Score
82/100
Uploaded: 2026-08-07
Published Date: 2020-05-22
Last Modified Date: 2020-05-22
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
Intezer's report analyzes APT15/Ke3chang's Ketrum backdoors (two variants) and their code reuse across the group's toolset, detailing sample metadata, C2 infrastructure (thehuguardian.com, IP), supported commands, implementation differences, encryption/encoding mechanisms, and IOCs (SHA256 hashes and network artefacts) to aid detection and attribution.