S-Type
Software · ATTACK:enterprise:S0085
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0085",
"title": "S-Type",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0085",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--66b1dcde-17a0-4c7b-95fa-b08d430c2131",
"external_id": "S0085",
"domain": "enterprise",
"created": "2017-05-31T21:32:55.925Z",
"modified": "2025-04-16T20:38:13.738Z",
"version": "1.3",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Cylance Dust Storm",
"url": "https://s7d2.scene7.com/is/content/cylance/prod/cylance-web/en-us/resources/knowledge-center/resource-library/reports/Op_Dust_Storm_Report.pdf"
}
]
}Explicit source assertions (21)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--11874e26-e692-43da-bb54-760e51a4714f
Cylance Dust Storm · Microsoft DTCATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--17bc166c-7598-4297-9cc1-1ee9ef4182a2
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4971ab34-bfff-4384-b04f-6a7cd004ae2f
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4a42e063-e5c1-4408-9634-fe2fe8af76b5
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4b23ac99-3761-46f0-ad5d-2cf63a95036a
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4d4c8221-17a9-4e5b-86f9-6a0cffc42424
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5ecc940b-9506-484c-8866-6a6b08b63bf0
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1614.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--602c1dc8-314c-4149-805a-a9a741aa074e
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1136.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6d819560-bdfb-4e0a-bf56-fddcba60cdb5
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7bbe8987-5cb2-464d-8874-56825164313c
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7fbb56bf-cadd-4663-8067-f233d4c9c751
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--813e4416-bee6-4192-a712-6b5f80a7fff3
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1547.009
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--907df22e-fdfe-4b93-8b18-ebf66f83868c
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9873626b-74e8-456d-9e34-95a313daa27b
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1070.009
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a5848605-3931-4dc8-a3e4-299683258c0f
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a65042f5-d095-48aa-9856-a8c00d528087
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--abee00d3-8417-468b-84a4-40c7d0ac4f7d
Cylance Dust StormATTACK:enterprise:C0016 → uses → ATTACK:enterprise:S0085
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--af60497d-7356-444c-b842-6ad9fb0d7dea
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c7e8feda-58fd-4015-9525-9032fd0b8872
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d067b113-4584-419f-860b-d3184f734350
Cylance Dust StormATTACK:enterprise:S0085 → uses → ATTACK:enterprise:T1087.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fb0aef48-57f5-4331-acdd-25fdfdf1babb
Cylance Dust Storm