Marap
- First seen
- 2018-08-01 00:00:00
- Malware type
- downloader
- Family
- Malware family
- Profile updated
- 2026-07-07 13:46:00
Targeted industries: financial-services
Context
Marap is a downloader, named after its command and control (C&C) phone home parameter "param" spelled backwards. It is written in C and contains a few notable anti-analysis features.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Marap_Auto (yara-rule)
Reports & references
- cert.ssi.gouv.fr — Certfr 2020 Cti 006 (report)
- cert.ssi.gouv.fr — Certfr 2020 Cti 009 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Marap (report)
- proofpoint.com — New Modular Downloaders Fingerprint Systems Prepare More Part 1 Marap (report)