ThaiCERT    ETDA    MDES
Report
Search
Home > List all groups > List all tools > List all groups using tool Cahnadr

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: Cahnadr

NamesCahnadr
NDriver
CategoryMalware
TypeRootkit
Description(Kaspersky) Canhadr, also known as NDriver, contains low-level routines for network, IO operations and so on. Its kernel-mode program is able to execute malicious code without crashing the whole file system or causing Blue Screen – a remarkable achievement. Written in pure C language, Canhadr/Ndriver provides full access to the hard drive and operating memory despite device security restrictions, and carries out integrity control of various system components to avoid debugging and security detection.
Information<https://securelist.com/apt-slingshot/84312/>

Last change to this tool card: 19 April 2020

Download this tool card in JSON format

Previous: Cadelspy
Next: Cain & Abel

All groups using tool Cahnadr

ChangedNameCountryObserved

APT groups

 Slingshot[Unknown]2012 

1 group listed (1 APT, 0 other, 0 unknown)

Thailand Computer Emergency Response Team (ThaiCERT)
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1234
E-mail report@thaicert.or.th
PGP Download PGP key