H3XA — Operational Evidence

TypeMalware

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[SOUNDBITE](https://attack.mitre.org/software/S0157) is a signature backdoor used by [APT32](https://attack.mitre.org/groups/G0050). (Citation: FireEye APT32 May 2017)

Labels

malware

6 recorded

Relationships

uses

from APT32

Group

uses

to Application Window Discovery

Technique

uses

to DNS

Technique

uses

to File and Directory Discovery

Technique

uses

to Modify Registry

Technique

uses

to System Information Discovery

Technique

3 external

References

mitre-attack

S0157

open

SOUNDBITE

—

FireEye APT32 May 2017

https://www.fireeye.com/blog/threat-research/2017/05/cyber-espionage-apt32.html

open