MITRE ATT&CKcampaign

C0007 FunnyDream

Published 2022-09-20 Modified 2026-07-31 Official page ↗
Domain
enterprise
Version
1.0
Created
2022-09-20

Description

FunnyDream was a suspected Chinese cyber espionage campaign that targeted government and foreign organizations in Malaysia, the Philippines, Taiwan, Vietnam, and other parts of Southeast Asia. Security researchers linked the FunnyDream campaign to possible Chinese-speaking threat actors through the use of the Chinoxy backdoor and noted infrastructure overlap with the TAG-16 threat group.

Related

Uses · MITRE ATT&CK (22)

  • S1050 PcShare software (tool)
  • S1044 FunnyDream software (malware)
  • S1043 ccf32 software (malware)
  • S1041 Chinoxy software (malware)
  • T1585.002 Email Accounts sub-technique
  • T1588.001 Malware sub-technique
  • T1588.002 Tool sub-technique
  • T1583.001 Domains sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1560.001 Archive via Utility sub-technique
  • S0057 Tasklist software (tool)
  • S0096 Systeminfo software (tool)
  • S0100 ipconfig software (tool)
  • S0104 netstat software (tool)
  • T1016 System Network Configuration Discovery technique
  • T1018 Remote System Discovery technique
  • T1047 Windows Management Instrumentation technique
  • T1049 System Network Connections Discovery technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique
  • T1105 Ingress Tool Transfer technique

References