ATT&CKReferencesFidelis Hi-Zor

Fidelis Hi-Zor

Fidelis Threat Research Team. (2016, January 27). Introducing Hi-Zor RAT. Retrieved March 24, 2016.

Open the source

Techniques0

Not cited by any technique.

Groups0

None recorded.

Software1

Campaigns0

None recorded.

Procedure examples2

TechniqueUsed byProcedure example
T1573.001
Symmetric Cryptography
MalwareHi-Zor

Hi-Zor encrypts C2 traffic with a double XOR using two distinct single-byte keys.

T1573.002
Asymmetric Cryptography
MalwareHi-Zor

Hi-Zor encrypts C2 traffic with TLS.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.