aol.pm

Machete

Software · ATTACK:enterprise:S0409

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0409",
  "title": "Machete",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0409",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--35cd1d01-1ede-44d2-b073-a264d727bc04",
  "external_id": "S0409",
  "domain": "enterprise",
  "created": "2019-09-13T13:17:25.718Z",
  "modified": "2025-06-06T14:13:34.557Z",
  "version": "2.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Pyark"
    },
    {
      "source_name": "Machete"
    },
    {
      "source_name": "ESET Machete July 2019",
      "url": "https://www.welivesecurity.com/wp-content/uploads/2019/08/ESET_Machete.pdf"
    },
    {
      "source_name": "Securelist Machete Aug 2014",
      "url": "https://securelist.com/el-machete/66108/"
    },
    {
      "source_name": "360 Machete Sep 2020",
      "url": "https://blog.360totalsecurity.com/en/apt-c-43-steals-venezuelan-military-secrets-to-provide-intelligence-support-for-the-reactionaries-hpreact-campaign/"
    }
  ]
}

Explicit source assertions (42)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1140

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--075c6890-45e1-495e-a83e-b81ab05a8b4e

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1573.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--140046d6-8cb6-4a09-bd74-fd7696ac4247

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1552.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--14adcf50-912a-48d5-87f6-72d2273039aa

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1041

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--18e170d7-ff3f-450b-9366-cea23216b60e

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--230fb134-db80-490d-9c00-5039487d5903

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--268d6aed-3961-42d9-9d34-785a9903d004

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1125

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--293f103b-ab5f-46ee-b51e-c111370f3b79

Securelist Machete Aug 2014 · Cylance Machete Mar 2017 · 360 Machete Sep 2020

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1027.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--29dcecc6-83ea-4e82-b368-b54812157b41

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1053.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2e532de4-b002-4c2d-a37c-6d535ff090fa

ESET Machete July 2019 · Securelist Machete Aug 2014

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1217

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--334ae43c-2c0b-4a7a-aab5-6ff59005dbf5

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1555.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--48a5f18e-d744-4600-8489-18533cadb0c0

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1132.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5ccf856f-abd9-4ef6-b17f-803ecb20435f

Securelist Machete Aug 2014

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1071.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--685856c8-227b-41b3-841d-9a7be6389eb9

ESET Machete July 2019 · Cylance Machete Mar 2017 · 360 Machete Sep 2020

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6a9d747a-d2d6-48eb-92d0-441f1c127c4c

ESET Machete July 2019 · 360 Machete Sep 2020

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1036.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6c92e9a2-ed4b-40ba-831e-91fcc60aebd4

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1020

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6cf0d062-e441-48ca-b675-2f01ae333b74

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1036.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--72cb3a93-f4c1-43a8-9a62-43bf1f6f4889

ESET Machete July 2019 · Securelist Machete Aug 2014

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1029

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--76b62130-29f5-4e3a-ace1-146a228a08a9

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1074.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--79333543-6031-4aa4-91be-35d80fae8ed2

ESET Machete July 2019 · Cylance Machete Mar 2017

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1115

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7e05e716-1a86-4f87-9eba-5b5c6ee61b8a

ESET Machete July 2019 · Securelist Machete Aug 2014

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7e6995cc-c917-4ac7-84e1-5dbf661f29cd

Securelist Machete Aug 2014 · Cylance Machete Mar 2017

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1123

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--86e8f395-3c57-4602-8e7c-30058d05a655

Securelist Machete Aug 2014 · Cylance Machete Mar 2017 · 360 Machete Sep 2020

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--87b4eb41-5272-4aa5-ae2f-3541a754d011

ESET Machete July 2019 · Cylance Machete Mar 2017 · 360 Machete Sep 2020

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8ab5954b-d36f-40c3-8f90-7e4862d38f43

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1560.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8b95c259-d8eb-4258-aec0-e7c92bf3ac05

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9901b17d-551e-4971-9ff7-7142e7c2bb4e

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1025

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9cba53fd-9b5c-4dc3-b933-c167b1d62a03

Cylance Machete Mar 2017 · ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1052.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9ceaecae-f85d-4eb7-a518-fb98b2b71c66

ESET Machete July 2019 · Securelist Machete Aug 2014

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1573.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a2ed58c0-7bd3-4a94-99b3-f2ff94dea408

Cylance Machete Mar 2017

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a5c8b6af-8685-4068-8046-122bbd5f8845

ESET Machete July 2019 · Securelist Machete Aug 2014 · Cylance Machete Mar 2017 · 360 Machete Sep 2020

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1016.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b2cf7bc7-d373-4627-9610-73544d1be8cc

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1120

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b71a28d8-a1b1-41b4-a0ac-f92bef513c6e

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b8d078f6-77ad-4c6c-8d20-0c4a5a3fd05a

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1008

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bdb7f4c5-3620-479b-af38-95f42e82fb68

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1560

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c254bf89-3726-4c56-aae5-700c59427daf

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1059.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cb58db80-48e9-4138-9ce4-bd726a3d1745

ESET Machete July 2019 · Securelist Machete Aug 2014 · 360 Machete Sep 2020

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d0c60722-e668-4597-a25f-f7e1eb1a5962

ESET Machete July 2019 · Cylance Machete Mar 2017 · 360 Machete Sep 2020

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d843c014-0814-4945-b75a-09db4ad6e81b

ESET Machete July 2019

ATTACK:enterprise:G0095 → uses → ATTACK:enterprise:S0409

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f33b1a88-1c1c-4ea4-a1b3-f1198012e728

Securelist Machete Aug 2014 · ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1564.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f8f50914-3b71-40a2-b661-5e11571222a6

ESET Machete July 2019

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1113

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fb99048f-bb37-47be-b2a5-d03d9ff087f1

ESET Machete July 2019 · Securelist Machete Aug 2014 · Cylance Machete Mar 2017 · 360 Machete Sep 2020

ATTACK:enterprise:S0409 → uses → ATTACK:enterprise:T1027.010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fdf56c06-8e42-4cb5-b6e0-a7ec55355ff6

ESET Machete July 2019 · Cylance Machete Mar 2017

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.