Mongall
Software · ATTACK:enterprise:S1026
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1026",
"title": "Mongall",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1026",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--6fb36c6f-bb3d-4ed6-9471-cb9933e5c154",
"external_id": "S1026",
"domain": "enterprise",
"created": "2022-07-25T17:00:15.045Z",
"modified": "2025-10-21T23:07:12.767Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "SentinelOne Aoqin Dragon June 2022",
"url": "https://www.sentinelone.com/labs/aoqin-dragon-newly-discovered-chinese-linked-apt-has-been-quietly-spying-on-organizations-for-10-years/"
}
]
}Explicit source assertions (16)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--062e9fe2-bfc1-49dc-85b2-e8356757a2e8
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2310e7b8-a4c7-460d-a89d-8d5854c59a44
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--23ebaddf-0f99-4ed9-9aa4-39577490fa81
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1120
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3146b7d3-26c9-47c4-b114-d39a4a786fc9
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3a8eb909-108e-4d4c-b893-d76b585caa9b
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:G1007 → uses → ATTACK:enterprise:S1026
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4753b372-6ac2-4a0e-8e0c-1a14c884fa8e
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4c131eaa-c7c1-4c17-bcab-25cdf35e743c
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1218.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7920e13a-6c7f-4609-9a6a-729c053242eb
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--86f238c5-20c2-4c94-9be9-886105c95252
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a98804cf-b3f8-40c5-beac-2a82a18c891f
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac062b78-400d-4d9a-9c5b-95c7a1b6dd42
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c1bf0daf-42e0-426a-ba8a-ba892f688963
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1055.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cc2dd0db-3679-4b14-b9a1-4aff659e2c4a
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d336d669-ef00-476d-81f6-0fe88093e1e6
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--df0d3103-a054-43a5-9b18-d40977171736
SentinelOne Aoqin Dragon June 2022ATTACK:enterprise:S1026 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f38fa132-2485-45aa-ad86-4608595adb65
SentinelOne Aoqin Dragon June 2022