RGDoor

Description

RGDoor is a malicious Internet Information Services (IIS) backdoor developed in the C++ language. RGDoor has been seen deployed on webservers belonging to the Middle East government organizations. RGDoor provides backdoor access to compromised IIS servers.

Names

Name
RGDoor

Category

Malware

Type

• Backdoor
• Info stealer

Information

• https://unit42.paloaltonetworks.com/unit42-oilrig-uses-rgdoor-iis-backdoor-targets-middle-east/
• https://researchcenter.paloaltonetworks.com/2017/09/unit42-striking-oil-closer-look-adversary-infrastructure/

Mitre Attack

• https://attack.mitre.org/software/S0258/

Malpedia

• https://malpedia.caad.fkie.fraunhofer.de/details/win.rgdoor

Other Information

Uuid

260ce10a-405e-4723-a836-5430dcf54336

Last Card Change

2020-05-14