Malware: HIDEDRV

Description

[HIDEDRV](https://attack.mitre.org/software/S0135) is a rootkit used by [APT28](https://attack.mitre.org/groups/G0007). It has been deployed along with [Downdelph](https://attack.mitre.org/software/S0134) to execute and hide that malware. (Citation: ESET Sednit Part 3) (Citation: Sekoia HideDRV Oct 2016)

External References

• mitre-attack
• ESET Sednit Part 3
• Sekoia HideDRV Oct 2016

Techniques Used by This Malware

• T1014 — Rootkit
• T1055.001 — Dynamic-link Library Injection

APT Groups Using This Malware

• APT28