● Malware

CozyCar

CozyCar is malware that was used by APT29 from 2010 to 2015. It is a modular malware platform, and its backdoor component can be instructed to download and execute a variety of modules with different functionality.

View graph Watch Export

Indicators tracked

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

15 relationships

T1053.005: Scheduled Task

source

T1218.011: Rundll32

source

T1027.013: Encrypted/Encoded File

source

T1003.002: Security Account Manager

source

T1543.003: Windows Service

source

T1082: System Information Discovery

source

T1003.001: LSASS Memory

source

T1497: Virtualization/Sandbox Evasion

source

T1547.001: Registry Run Keys / Startup Folder

source

T1036.003: Rename Legitimate Utilities

source

T1102.002: Bidirectional Communication

source

T1518.001: Security Software Discovery

source

T1059.003: Windows Command Shell

source

T1071.001: Web Protocols

source