Skip to content

S0205 Naid

Naid is a trojan used by Elderwood to open a backdoor on compromised hosts. 2 1

Item Value
ID S0205
Associated Names
Version 1.0
Created 18 April 2018
Last Modified 06 January 2021
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
enterprise T1543 Create or Modify System Process -
enterprise T1543.003 Windows Service Naid creates a new service to establish.1
enterprise T1112 Modify Registry Naid creates Registry entries that store information about a created service and point to a malicious DLL dropped to disk.1
enterprise T1082 System Information Discovery Naid collects a unique identifier (UID) from a compromised host.1
enterprise T1016 System Network Configuration Discovery Naid collects the domain name from a compromised host.1

Groups That Use This Software

ID Name References
G0066 Elderwood 2


Back to top