aol.pm

LaZagne

Software · ATTACK:enterprise:S0349

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0349",
  "title": "LaZagne",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0349",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "tool--b76b2d94-60e4-4107-a903-4a3a7622fb3b",
  "external_id": "S0349",
  "domain": "enterprise",
  "created": "2019-01-30T16:44:59.887Z",
  "modified": "2024-04-04T03:49:27.035Z",
  "version": "1.6",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "LaZagne"
    },
    {
      "source_name": "GitHub LaZagne Dec 2018",
      "url": "https://github.com/AlessandroZ/LaZagne"
    },
    {
      "source_name": "GitHub LaZange Dec 2018",
      "url": "https://github.com/AlessandroZ/LaZagne"
    }
  ]
}

Explicit source assertions (22)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:G0077 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--022c1740-5adb-473e-a8b3-5b1646c959d8

Symantec Leafminer July 2018

ATTACK:enterprise:S0349 → uses → ATTACK:enterprise:T1552.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--229150e3-5c4b-475e-8981-27fb472ad119

GitHub LaZagne Dec 2018

ATTACK:enterprise:S0349 → uses → ATTACK:enterprise:T1555.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--250af0e7-a45e-4cbe-9cad-5445e8669022

GitHub LaZagne Dec 2018

ATTACK:enterprise:S0349 → uses → ATTACK:enterprise:T1003.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2fff9b06-61f5-41f5-8cef-210485eaa8b2

GitHub LaZagne Dec 2018

ATTACK:enterprise:S0349 → uses → ATTACK:enterprise:T1003.008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3822f934-0b93-417b-bb1d-06218d51922e

GitHub LaZagne Dec 2018

ATTACK:enterprise:S0349 → uses → ATTACK:enterprise:T1555.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3b806ebb-0c5d-4ba8-adf8-b215a59f81b0

GitHub LaZagne Dec 2018

ATTACK:enterprise:S0349 → uses → ATTACK:enterprise:T1003.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--43619944-94e9-43d9-a761-8e4db2113eef

GitHub LaZagne Dec 2018

ATTACK:enterprise:G0102 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4d0e6809-943f-424b-b8e9-f3b8baa11411

Mandiant FIN12 Oct 2021

ATTACK:enterprise:G0022 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5b50193e-6a97-432a-8839-6bb18e88271f

Symantec Buckeye

ATTACK:enterprise:G1015 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--64205021-48f8-4dbb-a731-e9c921bbf7f1

MSTIC Octo Tempest Operations October 2023

ATTACK:enterprise:G0049 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8b42462a-0d66-4740-8f48-0857ab523370

FireEye APT35 2018

ATTACK:enterprise:S0349 → uses → ATTACK:enterprise:T1003.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9399157f-4443-447f-b2e1-2227582af6e6

GitHub LaZagne Dec 2018

ATTACK:enterprise:G0069 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--97068a5a-faff-4212-a841-c06db163452e

Symantec MuddyWater Dec 2018 · TrendMicro POWERSTATS V3 June 2019

ATTACK:enterprise:G0100 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9b2caa3d-10ae-471b-b0b1-527fbcd006ec

Kaspersky Cloud Atlas August 2019

ATTACK:enterprise:G0064 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9d4aa0d4-b460-4320-8c46-2d6ffbe675af

Symantec Elfin Mar 2019

ATTACK:enterprise:G0139 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a38bce09-385d-44b0-91a4-307ee5d328c3

ATT TeamTNT Chimaera September 2020

ATTACK:enterprise:G0131 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a779fd0b-0fa0-4bcd-837f-4d3e12482ca1

TrendMicro Tonto Team October 2020

ATTACK:enterprise:S0349 → uses → ATTACK:enterprise:T1555

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b0f355cc-e11f-4027-9db3-59ec64cd367f

GitHub LaZagne Dec 2018

ATTACK:enterprise:S0349 → uses → ATTACK:enterprise:T1555.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b32c6aa0-9299-4ada-a626-9805ba1f1610

GitHub LaZagne Dec 2018

ATTACK:enterprise:S0349 → uses → ATTACK:enterprise:T1003.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bb9706eb-de51-4200-ac38-d7d658f90ea9

Picus Labs Proc cump 2022 · GitHub LaZagne Dec 2018

ATTACK:enterprise:G0120 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c0a10dc5-51e4-4ec3-a827-4999bde3ed58

ESET EvilNum July 2020

ATTACK:enterprise:G1024 → uses → ATTACK:enterprise:S0349

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e5328a4e-b37a-4020-b242-ea6c60605e02

Arctic Wolf Akira 2023

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.