Winnti for Windows (245c216e-41c3-4dec-8b23-bfc7c6a46d6e)

Winnti for Windows is a modular remote access Trojan (RAT) that has been used likely by multiple groups to carry out intrusions in various regions since at least 2010, including by one group referred to as the same name, Winnti Group.^{[Kaspersky Winnti April 2013]}^{[Microsoft Winnti Jan 2017]}^{[Novetta Winnti April 2015]}^{[401 TRG Winnti Umbrella May 2018]}. The Linux variant is tracked separately under Winnti for Linux.^{[Chronicle Winnti for Linux May 2019]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Winnti for Windows (245c216e-41c3-4dec-8b23-bfc7c6a46d6e)	Tidal Software	Winnti Group (6932662a-53a7-4e43-877f-6e940e2d744b)	Tidal Groups	1