DistTrack

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.disttrack

Threat Analysis

DistTrack is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→http://contagiodump.blogspot.com/2012/08/shamoon-or-disttracka-samples.html

→http://researchcenter.paloaltonetworks.com/2016/11/unit42-shamoon-2-return-disttrack-wiper/?adbsc=social68389776&adbid=804134348374970368&adbpl=tw&adbpr=4487645412

→http://researchcenter.paloaltonetworks.com/2017/03/unit42-shamoon-2-delivering-disttrack/

→http://www.vinransomware.com/blog/detailed-threat-analysis-of-shamoon-2-0-malware

→https://afyonluoglu.org/PublicWebFiles/Reports-TR/2017%20FireEye%20M-Trends%20Report.pdf

Quick Facts

TypeAPT / Threat Group

Aliases3

Also Known As

Shamoonwin.disttrackDistTrack

External Intelligence

Malpedia: win.disttrack

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search DistTrack