MicroBackdoor

Malware type
backdoor
Family
Malware family
Profile updated
2026-07-07 14:23:52

Context

Open-source lightweight backdoor for C2 communication. GitHub: https://github.com/Cr4sh/MicroBackdoor

Detection coverage

  • 2 YARA rules

Detection rules

  • CLUSTER25_Ghostwriter_Microbackdoor_72632_00001 (yara-rule)
  • MALPEDIA_Win_Microbackdoor_Auto (yara-rule)

Reports & references

  • inquest.net — Ukraine Cyberwar Overview (report)
  • cip.gov.ua — Khto Stoyit Za Kiberatakami Na Ukrayinsku Kritichnu Informaciinu Infrastrukturu Statistika 15 22 Bereznya (report)
  • Mandiant — Spear Phish Ukrainian Entities (report)
  • cybercom.mil — Cyber National Mission Force Discloses Iocs From Ukrainian Networks (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Microbackdoor (report)
  • attackiq.com — Attack Graph Response To Unc1151 Continued Targeting Of Ukraine (report)
  • CERT-UA — 37626 (report)
  • github.com — Microbackdoor (report)
  • cluster25.io — Ghostwriter Unc1151 Adopts Microbackdoor Variants In Cyber Operations Against Targets In Ukraine (report)
  • ti.qianxin.com — Analysis Of Attack Activities Of Suspected Aptorganization Unc1151 Against Ukraine And Other Countries (report)

External references