Netskope Threat Labs

DownPaper

ATP Sandbox Adv. Heuristics

Stats

First seen
May 2023
Last seen
October 2026

MITRE ATT&CK techniques

7 techniques across 4 tactics.

TA0002 Execution

TA0003 Persistence

  • T1547Boot or Logon Autostart Execution

TA0007 Discovery

  • T1012Query Registry
  • T1033System Owner/User Discovery
  • T1082System Information Discovery

TA0011 Command and Control

Associated groups

Alert name variants

Alert Name
Win32.Backdoor.Downpaper

Related families

BazarClamblingnjRATEmpireFlawedAmmyy