BRONZE BUTLER

MITRE
Type:
Unknown
Country:
Unknown
First seen:
Unknown
Details:

[BRONZE BUTLER](https://attack.mitre.org/groups/G0060) is a cyber espionage group with likely Chinese origins that has been active since at least 2008. The group primarily targets Japanese organizations, particularly those in government, biotechnology, electronics manufacturing, and industrial chemistry.(Citation: Trend Micro Daserf Nov 2017)(Citation: Secureworks BRONZE BUTLER Oct 2017)(Citation: Trend Micro Tick November 2019)

MITRE ATT&CK: View on MITRE
Techniques Used (40)
ID ATT&CK Tactics
T1003.001 LSASS Memory -
T1005 Data from Local System -
T1007 System Service Discovery -
T1018 Remote System Discovery -
T1027.001 Binary Padding -
T1027.003 Steganography -
T1036 Masquerading -
T1036.002 Right-to-Left Override -
T1036.005 Match Legitimate Resource Name or Location -
T1039 Data from Network Shared Drive -
T1053.002 At -
T1053.005 Scheduled Task -
T1059.001 PowerShell -
T1059.003 Windows Command Shell -
T1059.005 Visual Basic -
Aliases (392)
REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick REDBALDKNIGHT Tick
Related Malware (14)
ABK
other
at
tool
Avenger
other
BBK
other
build_downer
other
cmd
tool
Daserf
other
down_new
other
gsecdump
tool
Mimikatz
tool
Metadata
ID: 891
Created: 13/01/2026 17:48
Updated: 21/04/2026 16:00