HTRAN

HTRAN is a tool that proxies connections through intermediate hops and aids users in disguising their true geographical location. It can be used by adversaries to hide their location when interacting with the victim networks. [1][2]

ID: S0040
Associated Software: HUC Packet Transmit Tool
Type: TOOL
Platforms: Linux, Windows
Version: 1.2
Created: 31 May 2017
Last Modified: 23 April 2021

Associated Software Descriptions

Name Description
HUC Packet Transmit Tool

[1]

Techniques Used

Domain ID Name Use
Enterprise T1055 Process Injection

HTRAN can inject into into running processes.[2]

Enterprise T1090 Proxy

HTRAN can proxy TCP socket connections to obfuscate command and control infrastructure.[1][2]

Enterprise T1014 Rootkit

HTRAN can install a rootkit to hide network connections from the host OS.[2]

Groups That Use This Software

ID Name References
G0093 GALLIUM

[3][4]

G0005 APT12

[5]

References