SappyCache
- First seen
- 2022-08-15 00:00:00
- Malware type
- rat
- Family
- Malware family
- Profile updated
- 2026-07-07 14:32:57
Targeted industries: government-and-public-sector defense-and-aerospace
Context
SappyCache is a remote access tool (RAT) used in cyber espionage campaigns, primarily targeting governmental and aerospace sectors. It is designed to enable attackers to execute commands remotely and exfiltrate data.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Sappycache_Auto (yara-rule)
Reports & references
- clearskysec.com — Clearsky 2019 H1 Cyber Events Summary Report (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Sappycache (report)
- blog.alyac.co.kr — 2219 (report)
- Mandiant — Winrar Zero Day Abused In Multiple Campaigns (report)
- blog.reversinglabs.com — Catching Lateral Movement In Internal Emails (report)
- blog.alyac.co.kr — 2219 (report)