SLIMAGENT

Malware type
screen-capture
Profile updated
2026-07-07 14:48:37

Targeted industries: government-and-public-sector

Targeted regions: country_code:ua

Context

According to CERT-UA, this is a malware developed using the C++ programming language. The main functional purpose is the production of screenshots.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Slimagent_Auto (yara-rule)

Reports & references

  • blog.sekoia.io — Apt28 Operation Phantom Net Voxel (report)
  • ESET — Sednit Reloaded Back Trenches (report)
  • CERT-UA — 6284080 (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Slimagent (report)

External references