LiteDuke (71e4028c-9ca1-45ce-bc44-98209ae9f6bd)
LiteDuke is a third stage backdoor that was used by APT29, primarily in 2014-2015. LiteDuke used the same dropper as PolyglotDuke, and was found on machines also compromised by MiniDuke.[ESET Dukes October 2019]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| LiteDuke (71e4028c-9ca1-45ce-bc44-98209ae9f6bd) | Tidal Software | APT29 (4c3e48b9-4426-4271-a7af-c3dfad79f447) | Tidal Groups | 1 |