SUNBURST

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[SUNBURST](https://attack.mitre.org/software/S0559) is a trojanized DLL designed to fit within the SolarWinds Orion software update framework. It was used by [APT29](https://attack.mitre.org/groups/G0016) since at least February 2020.(Citation: SolarWinds Sunburst Sunspot Update January 2021)(Citation: Microsoft Deep Dive Solorigate January 2021)

Associated Techniques (36)
ID ATT&CK Tactics
T1001.001 Junk Data -
T1001.002 Steganography -
T1001.003 Protocol or Service Impersonation -
T1005 Data from Local System -
T1007 System Service Discovery -
T1012 Query Registry -
T1016 System Network Configuration Discovery -
T1027 Obfuscated Files or Information -
T1027.005 Indicator Removal from Tools -
T1027.015 Compression -
T1033 System Owner/User Discovery -
T1036.005 Match Legitimate Resource Name or Location -
T1047 Windows Management Instrumentation -
T1057 Process Discovery -
T1059.005 Visual Basic -
Aliases (105)
Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate Solorigate
Used by Actors (1)
Metadata
ID: 476
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00