aol.pm

ASPXSpy

Software · ATTACK:enterprise:S0073

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0073",
  "title": "ASPXSpy",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0073",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--56f46b17-8cfa-46c0-b501-dd52fef394e2",
  "external_id": "S0073",
  "domain": "enterprise",
  "created": "2017-05-31T21:32:47.879Z",
  "modified": "2024-05-22T19:06:12.701Z",
  "version": "1.3",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Dell TG-3390",
      "url": "https://www.secureworks.com/research/threat-group-3390-targets-organizations-for-cyberespionage"
    }
  ]
}

Explicit source assertions (7)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:C0002 → uses → ATTACK:enterprise:S0073

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--152e1225-7b28-4954-85f1-ebd4300b6ab6

McAfee Night Dragon

ATTACK:enterprise:G0096 → uses → ATTACK:enterprise:S0073

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--15d39425-c748-442e-a8d0-de8ab3668cdd

FireEye APT41 Aug 2019

ATTACK:enterprise:G0125 → uses → ATTACK:enterprise:S0073

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--41561c6a-7749-4607-a8d1-c094631b4aaa

Volexity Exchange Marauder March 2021

ATTACK:enterprise:G0027 → uses → ATTACK:enterprise:S0073

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4a1bfb6c-f110-4785-9dff-4c8e433bf04d

Dell TG-3390 · Profero APT27 December 2020

ATTACK:enterprise:S0073 → uses → ATTACK:enterprise:T1505.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--660d09ce-8722-42b3-8503-911dff37bf22

Dell TG-3390

ATTACK:enterprise:G0087 → uses → ATTACK:enterprise:S0073

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9cc2f27e-bf85-4471-8be5-0cf614cd5840

FireEye APT39 Jan 2019

ATTACK:enterprise:G1030 → uses → ATTACK:enterprise:S0073

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c20e28d7-f577-419b-bf3f-a5d585e1f0f4

SentinelOne Agrius 2021

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.