Malware: HARDRAIN

Description

[HARDRAIN](https://attack.mitre.org/software/S0246) is a Trojan malware variant reportedly used by the North Korean government. (Citation: US-CERT HARDRAIN March 2018)

External References

• mitre-attack
• US-CERT HARDRAIN March 2018

Techniques Used by This Malware

• T1001.003 — Protocol or Service Impersonation
• T1059.003 — Windows Command Shell
• T1090 — Proxy
• T1562.004 — Disable or Modify System Firewall
• T1571 — Non-Standard Port

APT Groups Using This Malware

• Lazarus Group