SoreFang (Malware Family) By Fraunhofer FKIE Archived: 2026-04-05 13:37:32 UTC win.sorefang (Back to overview) SoreFang Actor(s): APT 29 There is no description at this point. References 2020-11-03 ⋅ Kaspersky Labs ⋅ GReAT APT trends report Q3 2020 WellMail EVILNUM Janicab Poet RAT AsyncRAT Ave Maria Cobalt Strike Crimson RAT CROSSWALK Dtrack LODEINFO MoriAgent Okrum PlugX POISONPLUG Rover ShadowPad SoreFang Winnti 2020-07-16 ⋅ CISA ⋅ US-CERT Malware Analysis Report (AR20-198A) SoreFang 2020-07-16 ⋅ NCSC UK ⋅ NCSC UK Advisory: APT29 targets COVID-19 vaccine development WellMail elf.wellmess SoreFang WellMess There is no Yara-Signature yet. Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.sorefang https://malpedia.caad.fkie.fraunhofer.de/details/win.sorefang Page 1 of 1