MITRE ATT&CKsoftware (malware)

S0258 RGDoor

Published 2018-10-17 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.2
Created
2018-10-17

Description

RGDoor is a malicious Internet Information Services (IIS) backdoor developed in the C++ language. RGDoor has been seen deployed on webservers belonging to the Middle East government organizations. RGDoor provides backdoor access to compromised IIS servers.

Related

Uses · MITRE ATT&CK (7)

  • T1505.004 IIS Components sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1560.003 Archive via Custom Method sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1033 System Owner/User Discovery technique
  • T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

References