Gold Dragon
- ID
- S0249
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 7 May 2024
Gold Dragon is a Korean-language, data gathering implant that was first observed in the wild in South Korea in July 2017. Gold Dragon was used along with Brave Prince and RunningRAT in operations targeting organizations associated with the 2018 Pyeongchang Winter Olympics. [1]
Techniques used (14)
- T1012 Query Registry
- T1033 System Owner/User Discovery
- T1057 Process Discovery
- T1059.003 Windows Command Shell
- T1070.004 File Deletion
- T1071.001 Web Protocols
- T1074.001 Local Data Staging
- T1082 System Information Discovery
- T1083 File and Directory Discovery
- T1105 Ingress Tool Transfer
- T1518.001 Security Software Discovery
- T1547.001 Registry Run Keys / Startup Folder
- T1560 Archive Collected Data
- T1685 Disable or Modify Tools