Taidoor__2020__MAR-10292089-1.v2_Chinese_Remote_Access_Trojan_TAIDOOR_CISA.pdf

This Malware Analysis Report describes the Taidoor remote access Trojan used by Chinese government actors, detailing the loader and payload components, their in-memory decrypt/decrypt chains, C2 infrastructure, IOCs (domains, IPs, and dlls), antivirus detections, YARA rules, and recommended mitigations to improve network defense.