Nightdoor

Nightdoor is a backdoor exclusively associated with Daggerfly operations. Nightdoor uses common libraries with MgBot and MacMa, linking these malware families together.

View graph Watch Export

Indicators tracked

Intelligence Reports20

20 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

15 relationships

T1053.005: Scheduled Task

source

T1033: System Owner/User Discovery

source

T1497.001: System Checks

source

T1082: System Information Discovery

source

T1071: Application Layer Protocol

source

T1140: Deobfuscate/Decode Files or Information

source

T1016: System Network Configuration Discovery

source

T1102: Web Service

source

T1057: Process Discovery

source

T1574: Hijack Execution Flow

source

T1059.003: Windows Command Shell

source

T1070.004: File Deletion

source

T1680: Local Storage Discovery

source

T1124: System Time Discovery

source