Skip to content

Hide Navigation Hide TOC

GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5)

GoldenEagle is a piece of Android malware that has been used in targeting of Uyghurs, Muslims, Tibetans, individuals in Turkey, and individuals in China. Samples have been found as early as 2012.(Citation: Lookout Uyghur Campaign)

Cluster A Galaxy A Cluster B Galaxy B Level
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Stored Application Data - T1409 (702055ac-4e54-4ae9-9527-e23a38e0b160) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware System Information Discovery - T1426 (e2ea7f6b-8d4f-49c3-819d-660530d12b77) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Software Discovery - T1418 (198ce408-1470-45ee-b47f-7056050d4fc2) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Download New Code at Runtime - T1407 (6c49d50f-494d-4150-b774-a655022d20a6) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Code Signing Policy Modification - T1632.001 (fcb11f06-ce0e-490b-bcc1-04a1623579f0) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Call Log - T1636.002 (1d1b1558-c833-482e-aabb-d07ef6eae63d) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Location Tracking - T1430 (99e6295e-741b-4857-b6e5-64989eb039b4) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware File and Directory Discovery - T1420 (cf28ca46-1fd3-46b4-b1f6-ec0b72361848) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Audio Capture - T1429 (6683aa0c-d98a-4f5b-ac57-ca7e9934a760) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Contact List - T1636.003 (e0b9ecb8-a7d1-43c7-aa30-8e19c6a92c86) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Screen Capture - T1513 (73c26732-6422-4081-8b63-6d0ae93d449e) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Exfiltration Over C2 Channel - T1646 (32063d7f-0a39-440d-a4a3-2694488f96cc) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Web Protocols - T1437.001 (2282a98b-5049-4f61-9381-55baca7c1add) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Match Legitimate Name or Location - T1655.001 (114fed8b-7eed-4136-8b9c-411c5c7fff4b) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Video Capture - T1512 (d8940e76-f9c1-4912-bea6-e21c251370b6) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware Data from Local System - T1533 (e1c912a9-e305-434b-9172-8a6ce3ec9c4a) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware SMS Control - T1582 (b327a9c0-e709-495c-aa6e-00b042136e2b) Attack Pattern 1
GoldenEagle - S0551 (0b9c5d11-651a-4378-b129-5c584d0242c5) Malware SMS Messages - T1636.004 (c6421411-ae61-42bb-9098-73fddb315002) Attack Pattern 1
Subvert Trust Controls - T1632 (79cb02f4-ac4e-4335-8b51-425c9573cce1) Attack Pattern Code Signing Policy Modification - T1632.001 (fcb11f06-ce0e-490b-bcc1-04a1623579f0) Attack Pattern 2
Protected User Data - T1636 (11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e) Attack Pattern Call Log - T1636.002 (1d1b1558-c833-482e-aabb-d07ef6eae63d) Attack Pattern 2
Protected User Data - T1636 (11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e) Attack Pattern Contact List - T1636.003 (e0b9ecb8-a7d1-43c7-aa30-8e19c6a92c86) Attack Pattern 2
Application Layer Protocol - T1437 (6a3f6490-9c44-40de-b059-e5940f246673) Attack Pattern Web Protocols - T1437.001 (2282a98b-5049-4f61-9381-55baca7c1add) Attack Pattern 2
Masquerading - T1655 (f856eaab-e84a-4265-a8a2-7bf37e5dc2fc) Attack Pattern Match Legitimate Name or Location - T1655.001 (114fed8b-7eed-4136-8b9c-411c5c7fff4b) Attack Pattern 2
Protected User Data - T1636 (11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e) Attack Pattern SMS Messages - T1636.004 (c6421411-ae61-42bb-9098-73fddb315002) Attack Pattern 2