Datper

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.datper

Threat Analysis

Datper is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→http://blog.jpcert.or.jp/2017/08/detecting-datper-malware-from-proxy-logs.html

→http://blog.trendmicro.com/trendlabs-security-intelligence/redbaldknight-bronze-butler-daserf-backdoor-now-using-steganography/

→https://blog.trendmicro.com/trendlabs-security-intelligence/operation-endtrade-finding-multi-stage-backdoors-that-tick/

→https://nao-sec.org/2020/01/an-overhead-view-of-the-royal-road.html

→https://www.macnica.net/file/mpressioncss_2018-1h-report_mnc_rev3_nopw.pdf

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

win.datperDatper

External Intelligence

Malpedia: win.datper

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Datper