aol.pm

Duqu

Software · ATTACK:enterprise:S0038

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0038",
  "title": "Duqu",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0038",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--68dca94f-c11d-421e-9287-7c501108e18c",
  "external_id": "S0038",
  "domain": "enterprise",
  "created": "2017-05-31T21:32:31.188Z",
  "modified": "2025-04-16T20:38:14.352Z",
  "version": "1.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Symantec W32.Duqu",
      "url": "https://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_duqu_the_precursor_to_the_next_stuxnet.pdf"
    }
  ]
}

Explicit source assertions (21)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0b823cda-4775-4690-9ea6-02bbaa3522a1

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1560.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0f3af4de-b1cc-4cc2-9eb7-9aa46cdebfcd

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1090.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1451c4a3-5dc6-4744-8120-197f3a3134c1

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1218.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--16ad2735-61b3-4cb4-8f23-439df70715c8

Kaspersky Duqu 2.0

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1087.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2db406cf-667d-4ad6-b768-7645f6663ac9

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3b0a7f6a-173f-41e6-8dec-2d1b4a0851d9

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1078

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--448a35fc-fecf-4373-9888-30c37dd1d56a

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1543.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--46660a8a-7724-4577-b09e-551a1ce61bfc

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1572

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--48f74ebb-3a7e-4b65-8e87-04d3bfe02914

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1074.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--611cb6eb-efdb-4d74-b354-5064ab52bd34

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1055.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7c3b845e-56ca-4580-b060-a3fa42b86a86

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1573.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7cb48d6d-1171-4e9d-87c7-4779293f6921

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1071

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8d0d938e-2e4c-49e8-9290-6bfb86161260

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1021.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8d7cd505-3b0e-4e90-bf47-6552612958dc

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1049

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--938a71e3-a9dc-4ad9-b1c4-b15d75967b8d

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1134

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--968610c5-7fa5-4840-b9bb-2f70eecd87fa

Kaspersky Duqu 2.0

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bbc31a33-f55f-43d4-a3fd-23426c5fc638

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1053.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bdee01a7-16cb-417e-8d9b-c98afd445bbc

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1001.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c0905059-1f3c-414c-8027-b8ec2e4b3c89

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dbf13cc5-f61b-41fd-96fa-d0bac20549bc

Symantec W32.Duqu

ATTACK:enterprise:S0038 → uses → ATTACK:enterprise:T1055.012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f64acb43-91b8-431a-ad0a-ad22afe5851a

Symantec W32.Duqu

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.