Rifdoor

· MalwareS0433 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Rifdoor is a remote access trojan (RAT) that shares numerous code similarities with HotCroissant.(Citation: Carbon Black HotCroissant April 2020)

Tactic Coverage

discovery (3)stealth (2)execution (1)persistence (1)privilege escalation (1)initial access (1)command and control (1)

Used By (1 groups)

Techniques (9)

T1016System Network Configuration Discovery

discovery

T1027.001Binary Padding

stealth

T1027.013Encrypted/Encoded File

stealth

T1033System Owner/User Discovery

discovery

T1082System Information Discovery

discovery

T1204.002Malicious File

execution

T1547.001Registry Run Keys / Startup Folder

References