NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/RainyDay
● Malware

RainyDay

RainyDay is a backdoor tool that has been used by Naikon since at least 2020.

View graph Watch Export
Indicators tracked
0
Intelligence Reports10
10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
27 relationships
T1053.005: Scheduled Task
source
T1113: Screen Capture
source
T1027.013: Encrypted/Encoded File
source
T1074.001: Local Data Staging
source
T1036.005: Match Legitimate Resource Name or Location
source
T1573.001: Symmetric Cryptography
source
T1543.003: Windows Service
source
T1574.001: DLL
source
T1007: System Service Discovery
source
T1106: Native API
source
T1005: Data from Local System
source
T1140: Deobfuscate/Decode Files or Information
source
T1555.003: Credentials from Web Browsers
source
T1090: Proxy
source
T1083: File and Directory Discovery
source
T1036.004: Masquerade Task or Service
source
T1057: Process Discovery
source
T1567.002: Exfiltration to Cloud Storage
source
T1095: Non-Application Layer Protocol
source
T1059.003: Windows Command Shell
source
T1555.004: Windows Credential Manager
source
T1070.004: File Deletion
source
T1071.001: Web Protocols
source
T1105: Ingress Tool Transfer
source
T1008: Fallback Channels
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon