Cyber Threat Report: 'Pelmeni Wrapper: New Wrapper of Kazuar (Turla Backdoor)'

Report Author Lab52
Publication Date 2024-02-19
Original Reporting Source
Attributed to Nation Russia
Related Intrusion Sets Turla
Related Threat Actors FSB Center 16

Technical analysis of the 'Pelmeni Wrapper' using samples found on VirusTotal by researchers from Lab52. The investigation outlines how Pelmeni is used by Turla as part of their infection chain for current campaigns. The report includes indicators of compromise (IoCs), with malware hashes for multiple samples and command and control (C2) URLs.

Cyber Threat Graph Context

Explore how this report relates to the wider threat graph