MITRE ATT&CK / Software / S0135

HIDEDRV

ID
S0135
Type
Malware
Platforms
Windows
Source
attack.mitre.org
MITRE last modified
18 Nov 2024

HIDEDRV is a rootkit used by APT28. It has been deployed along with Downdelph to execute and hide that malware. [1] [2]

Techniques used (2)

Groups using it (1)

References

  1. ESET Sednit Part 3
  2. Sekoia HideDRV Oct 2016