aol.pm

Volgmer

Software · ATTACK:enterprise:S0180

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0180",
  "title": "Volgmer",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0180",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--495b6cdb-7b5a-4fbc-8d33-e7ef68806d08",
  "external_id": "S0180",
  "domain": "enterprise",
  "created": "2018-01-16T16:13:52.465Z",
  "modified": "2024-04-10T22:16:05.440Z",
  "version": "1.3",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Volgmer"
    },
    {
      "source_name": "US-CERT Volgmer 2 Nov 2017",
      "url": "https://www.us-cert.gov/sites/default/files/publications/MAR-10135536-D_WHITE_S508C.PDF"
    },
    {
      "source_name": "US-CERT Volgmer Nov 2017",
      "url": "https://www.us-cert.gov/ncas/alerts/TA17-318B"
    },
    {
      "source_name": "Symantec Volgmer Aug 2014",
      "url": "https://web.archive.org/web/20181126143456/https://www.symantec.com/security-center/writeup/2014-081811-3237-99?tabid=2"
    }
  ]
}

Explicit source assertions (20)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--084ac639-2502-4020-8938-65352349acbb

US-CERT Volgmer Nov 2017

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1543.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1436e328-e692-4dbc-adfd-cf1024a98b2e

US-CERT Volgmer 2 Nov 2017 · US-CERT Volgmer Nov 2017 · Symantec Volgmer Aug 2014

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2a945fce-862b-46ff-8ee5-b78b220803f3

US-CERT Volgmer 2 Nov 2017

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--35697909-4c19-4799-a5ac-3153750619f8

US-CERT Volgmer 2 Nov 2017 · US-CERT Volgmer Nov 2017 · Symantec Volgmer Aug 2014

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1106

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4ed458b0-e5cd-48c7-baba-a33ca84a8738

US-CERT Volgmer 2 Nov 2017

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1573.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5ac475f9-f253-44db-861e-c7303961aa6c

US-CERT Volgmer 2 Nov 2017

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6139509a-709b-4ef4-81fb-25b9a35e2c60

US-CERT Volgmer Nov 2017

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--720cc0d6-9285-425b-bda2-3bdd59b4ea8f

US-CERT Volgmer 2 Nov 2017 · US-CERT Volgmer Nov 2017 · Symantec Volgmer Aug 2014

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--83ea0666-2b0d-4db8-821c-e51c15335bd1

Symantec Volgmer Aug 2014

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9c4bbad5-4821-4059-b881-557c2a6db1a0

Symantec Volgmer Aug 2014

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9f1c680d-042e-4291-bf9c-85c51120aa8b

US-CERT Volgmer Nov 2017 · US-CERT Volgmer 2 Nov 2017

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1573.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a49ed7b1-8160-48ae-a65f-feeb4747c522

US-CERT Volgmer Nov 2017

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1027.011

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ab4acf2d-7761-4f78-92eb-cbd4fea45929

US-CERT Volgmer Nov 2017 · Symantec Volgmer Aug 2014

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1112

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bd8fec61-37c8-489b-a74b-424ff85222ad

US-CERT Volgmer 2 Nov 2017 · Symantec Volgmer Aug 2014

ATTACK:enterprise:G0032 → uses → ATTACK:enterprise:S0180

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e46836e5-8ffe-45e5-9398-bb9fbb3a4aeb

US-CERT Volgmer Nov 2017

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1036.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e5a99bb2-c6d6-4a9c-bf31-4edd1d602c4e

US-CERT Volgmer 2 Nov 2017 · Symantec Volgmer Aug 2014

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1027.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e5d5ca1f-1e8e-4870-a9ef-33a963ee6148

US-CERT Volgmer 2 Nov 2017

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1049

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ed561ab1-db94-4dbe-873b-d3e6cb488c4d

Symantec Volgmer Aug 2014

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fa14a106-cc98-4a5f-b849-85a5491eea36

US-CERT Volgmer 2 Nov 2017

ATTACK:enterprise:S0180 → uses → ATTACK:enterprise:T1140

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fd2f1a44-2ae7-4df0-b53c-42bc96af2da1

US-CERT Volgmer 2 Nov 2017

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.