Search/FunnyDream
● Malware

FunnyDream

FunnyDream is a backdoor with multiple components that was used during the FunnyDream campaign since at least 2019, primarily for execution and exfiltration.

View graph Watch Export
Indicators tracked
0
Intelligence Reports10
10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
37 relationships
T1047: Windows Management Instrumentation
source
T1113: Screen Capture
source
T1033: System Owner/User Discovery
source
T1218.011: Rundll32
source
T1056.001: Keylogging
source
T1027.013: Encrypted/Encoded File
source
T1560.003: Archive via Custom Method
source
T1025: Data from Removable Media
source
T1074.001: Local Data Staging
source
T1543.003: Windows Service
source
T1559.001: Component Object Model
source
T1119: Automated Collection
source
T1120: Peripheral Device Discovery
source
T1106: Native API
source
T1005: Data from Local System
source
T1560.002: Archive via Library
source
T1010: Application Window Discovery
source
T1572: Protocol Tunneling
source
T1016: System Network Configuration Discovery
source
T1090: Proxy
source
T1070: Indicator Removal
source
T1083: File and Directory Discovery
source
T1036.004: Masquerade Task or Service
source
T1057: Process Discovery
source
T1041: Exfiltration Over C2 Channel
source
T1547.001: Registry Run Keys / Startup Folder
source
T1001: Data Obfuscation
source
T1095: Non-Application Layer Protocol
source
T1012: Query Registry
source
T1518.001: Security Software Discovery
source
T1059.003: Windows Command Shell
source
T1070.004: File Deletion
source
T1018: Remote System Discovery
source
T1105: Ingress Tool Transfer
source
T1680: Local Storage Discovery
source
T1124: System Time Discovery
source
T1055.001: Dynamic-link Library Injection
source