Rising Sun
Software · ATTACK:enterprise:S0448
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0448",
"title": "Rising Sun",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0448",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--56e6b6c2-e573-4969-8bab-783205cebbbf",
"external_id": "S0448",
"domain": "enterprise",
"created": "2020-05-14T22:29:25.653Z",
"modified": "2024-04-11T00:14:23.264Z",
"version": "2.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "McAfee Sharpshooter December 2018",
"url": "https://www.mcafee.com/enterprise/en-us/assets/reports/rp-operation-sharpshooter.pdf"
}
]
}Explicit source assertions (21)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0449ef6d-2ea2-40a3-9cc9-c07672d6a859
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--138f4287-ff95-45cd-bd65-d08708a2cbf5
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2d5c711d-dcd6-4d50-b91f-1fda5311eef5
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1560.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--39663ad3-549e-4984-a81b-acce5cb02090
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4f89d6c4-29ec-4777-bbc9-b0ea78064c42
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5bd827b4-cdaf-4d50-acb8-493f32d51acb
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6bb9972b-cec8-4de0-966e-8fea90b4941c
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7a0baa06-e3f1-4488-a0f6-ecf405413679
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1070
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--811ba10b-6fe7-40d9-ab98-70d4135ac7cf
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8a7317fd-fa8f-4c32-8aa5-4ff225116f7e
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1573.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aee478b7-c5f5-4d31-8df7-bd44fca1d677
Bleeping Computer Op Sharpshooter March 2019ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b3aa93e7-534f-4bd7-8df7-ed9dfa8ccccc
McAfee Sharpshooter December 2018ATTACK:enterprise:C0013 → uses → ATTACK:enterprise:S0448
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b4d9d40b-db4f-4e1d-a1ed-a1eb38ebe831
Bleeping Computer Op Sharpshooter March 2019 · McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1016.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b9edded2-4f07-431c-bdc1-e7ba489dd253
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c1a5ba7a-659b-4ac2-90df-f3f74a3a8442
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cfaf6b8e-1ee0-40bf-8a60-27f9c68d86c5
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dac3df5a-9569-41ac-94d2-115062b7b632
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ed3539fa-7ae7-45b0-9f0f-d62460ed07b1
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1564.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f1992fc5-5013-4fad-9a43-74a7f2b9e3ec
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f87c6571-5031-4abb-8eaf-3416eec79928
McAfee Sharpshooter December 2018ATTACK:enterprise:S0448 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f94c802d-62da-4689-ab35-baf9468e2423
McAfee Sharpshooter December 2018