Skip to content

Attor

Software · ATTACK:enterprise:S0438

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:S0438",
  "title": "Attor",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0438",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--8f423bd7-6ca7-4303-9e85-008c7ad5fdaa",
  "external_id": "S0438",
  "domain": "enterprise",
  "created": "2020-05-06T20:26:15.141Z",
  "modified": "2024-04-11T02:57:38.076Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Attor"
    },
    {
      "source_name": "ESET Attor Oct 2019",
      "url": "https://www.welivesecurity.com/wp-content/uploads/2019/10/ESET_Attor.pdf"
    }
  ]
}

Explicit source assertions (35)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--01a01a28-19e5-4e32-8a24-a98f2b69ced5

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1560.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--07ab0a67-7c7b-4971-9a3e-45069f234800

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0dfdfffc-2d1b-487f-91e0-66d81b185367

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1573.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1e3a1ea2-55fb-4abc-970a-e384b4c7d314

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1036.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--20ac9204-3ee3-454d-9d53-d5caa9ec582e

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1497.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--270d73c2-27fb-43ac-80b9-d4ea3fef2c06

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1090.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--278b9898-50c6-4c6d-9a35-7079ed580e78

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1037.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--29e33373-f05e-421b-9b5d-fc2d617b36af

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1218.011

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3c58b596-6a79-4c28-be76-40e7ae9afd8a

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1115

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--40205b23-d3d0-4d6a-a739-7ba2eb061c4f

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1573.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--44de534a-f105-4016-b7a4-2e7fce8a203e

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--57a19f3b-838f-45df-8cfe-964cbe5396d2

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1074.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6376c6be-5ec7-4775-8984-13a1474dc92d

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1120

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--68ab9dc7-4258-439c-b011-945175476fb7

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1112

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6d39de5f-6fbd-43e3-8da8-03a4cbe46656

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1113

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--75a82c43-c3f2-4cec-a9cb-3407b03f27b7

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1041

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7f7bf7a4-4f3a-48a6-bc19-4a139ba165a0

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1129

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--831513ed-bbf2-406f-ab74-bfffa8a376b7

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1543.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--87c7f912-4093-44f2-9f18-e97e649dd52e

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1027.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--895b238e-356f-4ad0-9a62-e6ae380dccd0

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1071.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--93f46e6e-cabc-4274-b50e-63bda692d01e

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1119

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--982474f3-d61d-49ac-b5be-30553e872db1

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1053.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--98d32782-62e2-4cd7-90b1-78c8a062b6ed

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1070.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a2db7220-d784-485f-bc77-046b90c02daf

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1055

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a308d350-2b2b-486a-a778-8e80f231dc68

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a9ebd162-da0a-4582-ba63-6bb54e165730

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1569.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c05978ea-b814-473e-a073-9bae9ab7695b

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1564.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c47d3636-65dd-4da1-8c90-e3e7aeb7effb

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d42cdf33-c3c1-4546-9a4f-40f6f64cd524

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1123

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--eb5510f9-e2ec-4a57-9a96-93dc3028bcea

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1106

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f0a78f8e-9d04-40d7-b0ce-6a463af4b8e1

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1020

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f49a45b8-6efb-4ac5-8714-9dfd9b31edbd

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1055.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f5e7233b-6419-4c09-b95b-c43f3004f246

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1680

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--faccd8d5-0e21-4e57-aef9-1ccf72150294

ESET Attor Oct 2019

ATTACK:enterprise:S0438 → uses → ATTACK:enterprise:T1012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fc661e81-fc5e-4243-874e-f311bc5a2d8d

ESET Attor Oct 2019

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.