S1147 Nightdoor

malwareEnterprise

platformsWindows

also known asNightdoor

Nightdoor is a backdoor exclusively associated with Daggerfly operations. Nightdoor uses common libraries with MgBot and MacMa, linking these malware families together.

techniques used (14)

ATT&CK techniques this enables or maps to.

T1016System Network Configuration Discovery
T1033System Owner/User Discovery
T1053.005Scheduled Task
T1057Process Discovery
T1059.003Windows Command Shell
T1070.004File Deletion
T1071Application Layer Protocol
T1082System Information Discovery
T1102Web Service
T1124System Time Discovery
T1140Deobfuscate/Decode Files or Information
T1497.001System Checks
T1574Hijack Execution Flow
T1680Local Storage Discovery

used by groups (1)

Threat groups associated with this.

G1034Daggerfly

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan