HTRAN — Malware Profile

HTRAN is a tool that proxies connections through intermediate hops and aids users in disguising their true geographical location. It can be used by adversaries to hide their location when interacting with the victim networks.

MITRE ATT&CK techniques (3)

• T1014 Rootkit
• T1055 Process Injection
• T1090 Proxy

Attributed threat actors

• GALLIUM
• APT12

Read the full analysis on IntelFusions