Gold Open Source
ExplorePackagesVulnerabilitiesCWEsMCP ServersScan
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Certified Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/Software/S0376
MITRE ATT&CK Malware

HOPLIGHT (S0376)

ShareXLinkedInRedditHN

[HOPLIGHT](https://attack.mitre.org/software/S0376) is a backdoor Trojan that has reportedly been used by the North Korean government.(Citation: US-CERT HOPLIGHT Apr 2019)

Platforms: Windows

▪Techniques implemented (21)

T1652Device Driver DiscoveryT1112Modify RegistryT1008Fallback ChannelsT1012Query RegistryT1090ProxyT1571Non-Standard PortT1550.002Pass the HashT1686Disable or Modify System FirewallT1083File and Directory DiscoveryT1003.002Security Account ManagerT1059.003Windows Command ShellT1041Exfiltration Over C2 ChannelT1132.001Standard EncodingT1082System Information DiscoveryT1546.003Windows Management Instrumentation Event SubscriptionT1569.002Service ExecutionT1680Local Storage DiscoveryT1105Ingress Tool TransferT1047Windows Management InstrumentationT1124System Time DiscoveryT1055Process Injection

▪Used by groups (2)

G0032Lazarus GroupG0082APT38
S0376on MITRE ATT&CK →

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.