HAMMERTOSS

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[HAMMERTOSS](https://attack.mitre.org/software/S0037) is a backdoor that was used by [APT29](https://attack.mitre.org/groups/G0016) in 2015. (Citation: FireEye APT29) (Citation: F-Secure The Dukes)

Associated Techniques (7)
ID ATT&CK Tactics
T1001.002 Steganography -
T1059.001 PowerShell -
T1071.001 Web Protocols -
T1102.003 One-Way Communication -
T1564.003 Hidden Window -
T1567.002 Exfiltration to Cloud Storage -
T1573.001 Symmetric Cryptography -
Aliases (210)
HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke HammerDuke NetDuke
Used by Actors (1)
APT29
Nation-state
Metadata
ID: 117
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00