MITRE ATT&CKsoftware (malware)
S0249 Gold Dragon
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.3
- Created
- 2018-10-17
Description
Gold Dragon is a Korean-language, data gathering implant that was first observed in the wild in South Korea in July 2017. Gold Dragon was used along with Brave Prince and RunningRAT in operations targeting organizations associated with the 2018 Pyeongchang Winter Olympics.
Related
Uses · MITRE ATT&CK (14)
- T1685 Disable or Modify Tools technique
- T1071.001 Web Protocols sub-technique
- T1074.001 Local Data Staging sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1560 Archive Collected Data technique
- T1070.004 File Deletion sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1012 Query Registry technique
- T1033 System Owner/User Discovery technique
- T1057 Process Discovery technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G0094 Kimsuky group