H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

HARDRAIN

[HARDRAIN](https://attack.mitre.org/software/S0246) is a Trojan malware variant reportedly used by the North Korean government. (Citation: US-CERT HARDRAIN March 2018)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[HARDRAIN](https://attack.mitre.org/software/S0246) is a Trojan malware variant reportedly used by the North Korean government. (Citation: US-CERT HARDRAIN March 2018)

Labels

malware
6 recorded

Relationships

uses
to Non-Standard Port
Technique
uses
to Protocol or Service Impersonation
Technique
uses
to Proxy
Technique
uses
to Windows Command Shell
Technique
uses
to Windows Host Firewall
Technique
uses
from Lazarus Group
Group
3 external

References

mitre-attack
S0246
open
HARDRAIN
—
US-CERT HARDRAIN March 2018
https://www.us-cert.gov/sites/default/files/publications/MAR-10135536-F.pdf
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance