Search/Pandora

● Malware

Pandora

Pandora is a multistage kernel rootkit with backdoor functionality that has been in use by Threat Group-3390 since at least 2020.

View graph Watch Export

Indicators tracked

0

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

49 relationships

T1573.001: Symmetric Cryptography

T1543.003: Windows Service

T1055: Process Injection

T1205: Traffic Signaling

T1553.006: Code Signing Policy Modification

T1112: Modify Registry

T1057: Process Discovery

T1068: Exploitation for Privilege Escalation

T1071.001: Web Protocols

T1105: Ingress Tool Transfer

T1569.002: Service Execution

T1027.015: Compression