FakeM — Malware Profile

FakeM is a shellcode-based Windows backdoor that has been used by Scarlet Mimic.

MITRE ATT&CK techniques (4)

• T1001.003 Protocol or Service Impersonation
• T1056.001 Keylogging
• T1095 Non-Application Layer Protocol
• T1573.001 Symmetric Cryptography

Attributed threat actors

• Scarlet Mimic

Read the full analysis on IntelFusions