Brave Prince — Malware Profile
Brave Prince is a Korean-language implant that was first observed in the wild in December 2017. It contains similar code and behavior to Gold Dragon, and was seen along with Gold Dragon and RunningRAT in operations surrounding the 2018 Pyeongchang Winter Olympics.
MITRE ATT&CK techniques (7)
- T1012 Query Registry
- T1016 System Network Configuration Discovery
- T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol
- T1057 Process Discovery
- T1082 System Information Discovery
- T1083 File and Directory Discovery
- T1685 Disable or Modify Tools