MITRE ATT&CKsoftware (malware)

S0011 Taidoor

Published 2017-05-31 Modified 2024-04-10 Official page ↗
Domain
enterprise
Platforms
Windows
Version
2.1
Created
2017-05-31

Description

Taidoor is a remote access trojan (RAT) that has been used by Chinese government cyber actors to maintain access on victim networks. Taidoor has primarily been used against Taiwanese government organizations since at least 2010.

Related

Uses · MITRE ATT&CK (20)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1573.001 Symmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1070.004 File Deletion sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1055.001 Dynamic-link Library Injection sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1005 Data from Local System technique
  • T1012 Query Registry technique
  • T1016 System Network Configuration Discovery technique
  • T1057 Process Discovery technique
  • T1083 File and Directory Discovery technique
  • T1095 Non-Application Layer Protocol technique
  • T1105 Ingress Tool Transfer technique
  • T1106 Native API technique
  • T1112 Modify Registry technique
  • T1124 System Time Discovery technique

References