MITRE ATT&CKsoftware (malware)

S0544 HenBox

Published 2020-12-17 Modified 2026-09-02 Official page ↗
Domain
mobile
Platforms
Android
Version
1.0
Created
2020-12-17

Description

HenBox is Android malware that attempts to only execute on Xiaomi devices running the MIUI operating system. HenBox has primarily been used to target Uyghurs, a minority Turkic ethnic group.

Related

Uses · MITRE ATT&CK (18)

  • T1655.001 Match Legitimate Name or Location sub-technique
  • T1636.002 Call Log sub-technique
  • T1636.003 Contact List sub-technique
  • T1636.004 SMS Messages sub-technique
  • T1623.001 Unix Shell sub-technique
  • T1624.001 Broadcast Receivers sub-technique
  • T1633.001 System Checks sub-technique
  • T1575 Native API technique
  • T1533 Data from Local System technique
  • T1512 Video Capture technique
  • T1476 Deliver Malicious Application via Other Means technique
  • T1406 Obfuscated Files or Information technique
  • T1407 Download New Code at Runtime technique
  • T1418 Software Discovery technique
  • T1424 Process Discovery technique
  • T1426 System Information Discovery technique
  • T1429 Audio Capture technique
  • T1430 Location Tracking technique

References