H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

DOGCALL

[DOGCALL](https://attack.mitre.org/software/S0213) is a backdoor used by [APT37](https://attack.mitre.org/groups/G0067) that has been used to target South Korean government and military organizations in 2017. It is typically dropped using a Hangul Word Processor (HWP) exploit. (Citation: FireEye APT37 Feb 2018)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[DOGCALL](https://attack.mitre.org/software/S0213) is a backdoor used by [APT37](https://attack.mitre.org/groups/G0067) that has been used to target South Korean government and military organizations in 2017. It is typically dropped using a Hangul Word Processor (HWP) exploit. (Citation: FireEye APT37 Feb 2018)

Labels

malware
7 recorded

Relationships

uses
from APT37
Group
uses
to Audio Capture
Technique
uses
to Bidirectional Communication
Technique
uses
to Encrypted/Encoded File
Technique
uses
to Ingress Tool Transfer
Technique
uses
to Keylogging
Technique
uses
to Screen Capture
Technique
3 external

References

mitre-attack
S0213
open
DOGCALL
—
FireEye APT37 Feb 2018
https://services.google.com/fh/files/misc/apt37-reaper-the-overlooked-north-korean-actor.pdf
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance