MITRE ATT&CKsoftware (malware)

S1082 Sunbird

Published 2023-08-04 Modified 2023-10-07 Official page ↗
Domain
mobile
Platforms
Android
Version
1.0
Created
2023-08-04

Description

Sunbird is one of two mobile malware families known to be used by the APT Confucius. Analysis suggests that Sunbird was first active in early 2017. While Sunbird and Hornbill overlap in core capabilities, Sunbird has a more extensive set of malicious features.

Related

Uses · MITRE ATT&CK (17)

  • T1626.001 Device Administrator Permissions sub-technique
  • T1636.001 Calendar Entries sub-technique
  • T1636.002 Call Log sub-technique
  • T1636.003 Contact List sub-technique
  • T1646 Exfiltration Over C2 Channel technique
  • T1623.001 Unix Shell sub-technique
  • T1544 Ingress Tool Transfer technique
  • T1532 Archive Collected Data technique
  • T1533 Data from Local System technique
  • T1512 Video Capture technique
  • T1513 Screen Capture technique
  • T1409 Stored Application Data technique
  • T1418 Software Discovery technique
  • T1422 System Network Configuration Discovery technique
  • T1426 System Information Discovery technique
  • T1429 Audio Capture technique
  • T1430 Location Tracking technique

Referenced by MITRE ATT&CK · uses (1)

References