HIDEDRV — Malware Profile

HIDEDRV is a rootkit used by APT28. It has been deployed along with Downdelph to execute and hide that malware.

MITRE ATT&CK techniques (2)

• T1014 Rootkit
• T1055.001 Dynamic-link Library Injection

Attributed threat actors

• APT28

Read the full analysis on IntelFusions