MITRE ATT&CK / Software / S0516

SoreFang

ID
S0516
Type
Malware
Platforms
Windows
Source
attack.mitre.org
MITRE last modified
22 Oct 2025

SoreFang is first stage downloader used by APT29 for exfiltration and to load other malware.[1][2]

Techniques used (14)

Groups using it (1)

References

  1. NCSC APT29 July 2020
  2. CISA SoreFang July 2016