ELMER — Malware Profile

ELMER is a non-persistent, proxy-aware HTTP backdoor written in Delphi that has been used by APT16.

MITRE ATT&CK techniques (3)

• T1057 Process Discovery
• T1071.001 Web Protocols
• T1083 File and Directory Discovery

Attributed threat actors

• APT16

Read the full analysis on IntelFusions