Mongall
The MITRE Corporation
· Published 25/07/2022 19:00 · Modified 27/03/2026 01:05
Family
Essential information
- Confidence
- 100/100
- Is family
- Yes
- Published
- 25/07/2022 19:00
- Modified
- 27/03/2026 01:05
- Revoked
- No
- Author / Source
- The MITRE Corporation
- Related entities
- 30 attack patterns (mitre), 1 intrusion sets (apt), 3 sectors, 5 countries, 99 indicators
Description
[Mongall](https://attack.mitre.org/software/S1026) is a backdoor that has been used since at least 2013, including by [Aoqin Dragon](https://attack.mitre.org/groups/G1007).(Citation: SentinelOne Aoqin Dragon June 2022)
Marking (TLP)
TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
External references
Related entities
Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.
Attack patterns (MITRE) (30)
Intrusion sets (APT) (1)
-
Aoqin Dragon usesThe MITRE Corporation Confidence 100
[Aoqin Dragon](https://attack.mitre.org/groups/G1007) is a suspected Chinese cyber espionage threat group that has been active since at least 2013. [Aoqin Dragon](https://attack.mitre.org/groups/G1007) has primarily targeted government, education, and telecommunication organizations…
First seen 01/01/1970 · Last seen 16/11/5138 ·
Sectors (3)
-
Government targets
-
Education targets
-
Telecommunications targets
Countries (5)
-
Singapore targets
-
Cambodia targets
-
Hong Kong targets
-
Viet Nam targets
-
Australia targets
Indicators (99)
-
stix 100/100 Revoked
SHA256 of 008dd0c161a0d4042bdeb1f1bd62039a9224b7f0
· Valid until 12/09/2023 · Source: AlienVault -
stix 100/100 Revoked
MS_Visual_Cpp_2003 SHA256 of 041d9b089a9c8408c99073c9953ab59bd3447878
· Valid until 12/09/2023 · Source: AlienVault -
stix 100/100 Revoked
SHA256 of db4b1507f8902c95d10b1ed601b56e03499718c5
· Valid until 12/09/2023 · Source: AlienVault -
stix 100/100 Revoked
SHA256 of c87a8492de90a415d1fbe32becbafef5d5d8eabb
· Valid until 12/09/2023 · Source: AlienVault