H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[KARAE](https://attack.mitre.org/software/S0215) is a backdoor typically used by [APT37](https://attack.mitre.org/groups/G0067) as first-stage malware. (Citation: FireEye APT37 Feb 2018)

Labels

malware
5 recorded

Relationships

uses
from APT37
Group
usesTechnique
usesTechnique
3 external

References

mitre-attack
S0215
open
KARAE
—
FireEye APT37 Feb 2018
https://services.google.com/fh/files/misc/apt37-reaper-the-overlooked-north-korean-actor.pdf
open