Malware

DownPaper

DownPaper, sometimes delivered as sami.exe, is a Backdoor trojan.

DownPaper is a Windows malware family operated by Charming Kitten.

Background

DownPaper is a backdoor trojan that has occasionally been distributed under the filename sami.exe. Its core purpose is to retrieve and execute a second-stage payload. The malware has appeared in operations linked to Charming Kitten, an Iranian cyberespionage actor.

Source: Malpedia (Fraunhofer FKIE).