aol.pm

FunnyDream

Software · ATTACK:enterprise:S1044

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S1044",
  "title": "FunnyDream",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1044",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--be25c1c0-1590-4219-a3d5-6f31799d1d1b",
  "external_id": "S1044",
  "domain": "enterprise",
  "created": "2022-09-23T14:26:54.392Z",
  "modified": "2024-04-11T02:30:25.854Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Bitdefender FunnyDream Campaign November 2020",
      "url": "https://www.bitdefender.com/files/News/CaseStudies/study/379/Bitdefender-Whitepaper-Chinese-APT.pdf"
    }
  ]
}

Explicit source assertions (38)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:C0007 → uses → ATTACK:enterprise:S1044

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--021b1f3f-a542-4ff7-a3b5-c9207c58b887

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1543.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0a1b48b9-2063-449d-a316-c6760267720f

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0a606064-9f7f-4ca9-a2c5-b80360433ff7

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1047

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0fc08710-fefb-4109-821e-1130c14914f3

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1120

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1555866c-1eca-4de3-aded-d745fdd47d1c

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1074.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--20b14e6f-685d-4b88-9ab7-40f7beb99ec4

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1559.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--30e3ae03-ffd2-4ad0-822c-018b08079dd9

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1218.011

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--439e52b5-9aa1-4afb-b759-2b99b9fc5049

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1055.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--44a97cbb-ce03-43ee-959e-c582e64372a2

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1572

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4d7080b8-a3e0-4122-b0c9-c1d9c2ba6890

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5f7c7285-daa4-499d-b9d6-c1028e5148d4

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1036.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--60269020-6ab2-496a-9649-3b1cd707aced

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1041

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6ccbfb65-9be0-4b7c-947a-fb686e64985a

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1018

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--74ef18b6-ca55-4fc3-acf1-10ed585c160f

Kaspersky APT Trends Q1 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7b25dfb3-e1f5-4f75-94b3-a465e7f76cfb

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7e11e52f-e246-4752-a980-36ad2f7e82eb

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1033

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--82404260-b720-4f23-a162-81a9d6735c1e

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1124

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--856ebcb0-cfec-484a-a741-900bb4d7f38a

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8db65d27-ddf4-4edd-9ccb-8112a78e9f47

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1119

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8f7fe970-0a16-4007-84ae-e7294d06595f

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1113

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--91718be6-b03a-48fd-a1ab-a54d7148ffa2

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1090

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--93900b40-be44-48eb-92bc-c171a5ce5501

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1560.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9b69f1c0-ba37-478a-a3b9-c97b02761aee

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9c2ed616-647a-4cf5-9f43-b0b78f9fdcd1

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1070

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b26f9867-37f2-4b7f-9b87-26f2152191bc

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1106

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bc70728d-9f56-43df-8580-1d22c829bd14

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c8389b37-06ee-4cca-9f03-7ade85b1c681

Kaspersky APT Trends Q1 2020 · Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d0ce49aa-fc45-431a-8109-90958fb15b5e

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1560.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d29ff57c-2821-45e9-94b5-beb62f63f8ea

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1025

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e6e4cb23-3c58-41d8-9583-9e10bff2b1d0

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1518.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--eb8508e4-6ebe-44bc-af58-b7b626bddeb8

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ec06b018-fe67-49f0-976c-be5f7637b094

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1027.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f106c0c2-b83c-44b2-ab93-161e325f6a42

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1680

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f13b18fe-1596-453f-8dba-43cfa848a5e7

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fac15b17-554e-4f16-a131-abf5f703f6f9

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fc268488-a74d-4100-917f-be04cc81826b

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1095

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fc99ba1c-8782-4864-9009-77f8338cb3ed

Bitdefender FunnyDream Campaign November 2020

ATTACK:enterprise:S1044 → uses → ATTACK:enterprise:T1010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fde8c63b-13e7-47d0-836f-f8b5291bf2bd

Bitdefender FunnyDream Campaign November 2020

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.