SoreFang (3e959586-14ff-407b-a0d0-4e9580546f3f)
SoreFang is first stage downloader used by APT29 for exfiltration and to load other malware.[NCSC APT29 July 2020][CISA SoreFang July 2016]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| SoreFang (3e959586-14ff-407b-a0d0-4e9580546f3f) | Tidal Software | APT29 (4c3e48b9-4426-4271-a7af-c3dfad79f447) | Tidal Groups | 1 |