Brave Prince
Software · ATTACK:enterprise:S0252
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0252",
"title": "Brave Prince",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0252",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--28b97733-ef07-4414-aaa5-df50b2d30cc5",
"external_id": "S0252",
"domain": "enterprise",
"created": "2018-10-17T00:14:20.652Z",
"modified": "2025-04-16T20:37:59.301Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Brave Prince"
},
{
"source_name": "McAfee Gold Dragon",
"url": "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/gold-dragon-widens-olympics-malware-attacks-gains-permanent-presence-on-victims-systems/"
}
]
}Explicit source assertions (8)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0252 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0f66681a-7daf-4cd7-99af-3005b6586306
McAfee Gold DragonATTACK:enterprise:S0252 → uses → ATTACK:enterprise:T1048.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--28a113cd-efdc-49cf-b6d2-c967e11de751
McAfee Gold DragonATTACK:enterprise:S0252 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2d1beee9-0b61-4e66-9487-97f1665bbedc
McAfee Gold DragonATTACK:enterprise:S0252 → uses → ATTACK:enterprise:T1685
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4adc5d0c-a757-4cce-afbc-c0a08bd6aecf
McAfee Gold DragonATTACK:enterprise:G0094 → uses → ATTACK:enterprise:S0252
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--56996982-a954-44d6-9d99-c23d4babccc1
Talos Kimsuky Nov 2021 · Mandiant APT43 March 2024ATTACK:enterprise:S0252 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--69127424-40bb-4b92-8558-6fe1561e0a59
McAfee Gold DragonATTACK:enterprise:S0252 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ab08048c-4d1f-4214-9f53-1e87f6a20988
McAfee Gold DragonATTACK:enterprise:S0252 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bfa47cf5-93e4-451e-a2eb-dadca6ae6bb0
McAfee Gold Dragon