Search/BLUELIGHT

● Malware

BLUELIGHT

BLUELIGHT is a remote access Trojan used by APT37 that was first observed in early 2021.

View graph Watch Export

Indicators tracked

0

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

23 relationships

T1113: Screen Capture

T1033: System Owner/User Discovery

T1027.013: Encrypted/Encoded File

T1539: Steal Web Session Cookie

T1560.003: Archive via Custom Method

T1497.001: System Checks

T1082: System Information Discovery

T1560: Archive Collected Data

T1555.003: Credentials from Web Browsers

T1016: System Network Configuration Discovery

T1083: File and Directory Discovery

T1057: Process Discovery

T1041: Exfiltration Over C2 Channel

T1102.002: Bidirectional Communication

T1518.001: Security Software Discovery

T1070.004: File Deletion

T1071.001: Web Protocols

T1105: Ingress Tool Transfer

T1124: System Time Discovery