HDoor

HDoor is malware that has been customized and used by the Naikon group. [1]

ID: S0061
Associated Software: Custom HDoor
Type: MALWARE
Platforms: Windows
Version: 1.0

Techniques Used

Domain ID Name Use
Enterprise T1089 Disabling Security Tools

HDoor kills anti-virus found on the victim.[1]

Enterprise T1046 Network Service Scanning

HDoor scans to identify open ports on the victim.[1]

Groups That Use This Software

ID Name References
G0019 Naikon [1]

References