HOMETHREATSDADSTACHE
MALWARE FAMILY

DADSTACHE

Internal ID: win.dadstache
1
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family identifying win.dadstache. Origin and technical characteristics tracked via Malpedia.

Threat Analysis

DADSTACHE is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://danielplohmann.github.io/blog/2020/07/10/kf-sandbox-necromancy.html
→https://medium.com/insomniacs/apt40-goes-from-template-injections-to-ole-linkings-for-payload-delivery-99eb43170a97
→https://medium.com/insomniacs/dad-theres-a-rat-in-here-e3729b65bf7a
→https://twitter.com/cyb3rops/status/1199978327697694720
→https://twitter.com/killamjr/status/1204584085395517440
→https://www.elastic.co/blog/advanced-techniques-used-in-malaysian-focused-apt-campaign

Quick Facts

TypeMalware Family
Aliases1

Also Known As

win.dadstache

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search DADSTACHE