Get2
Software · ATTACK:enterprise:S0460
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0460",
"title": "Get2",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0460",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--099ecff2-41b8-436d-843c-038a9aa9aa69",
"external_id": "S0460",
"domain": "enterprise",
"created": "2020-05-29T20:32:42.686Z",
"modified": "2025-04-25T14:42:37.942Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Proofpoint TA505 October 2019",
"url": "https://www.proofpoint.com/us/threat-insight/post/ta505-distributes-new-sdbbot-remote-access-trojan-get2-downloader"
}
]
}Explicit source assertions (7)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G0092 → uses → ATTACK:enterprise:S0460
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--351bb2c4-db16-4c82-9539-3851dd61c608
Proofpoint TA505 October 2019ATTACK:enterprise:S0460 → uses → ATTACK:enterprise:T1055.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5a0db1e3-cd18-4f00-936b-4b8ede1e0498
Proofpoint TA505 October 2019ATTACK:enterprise:S0460 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6118a138-c13c-4117-97dd-c3e7ec3e1021
Proofpoint TA505 October 2019ATTACK:enterprise:S0460 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9c4281ea-b225-44b4-b460-255e51586598
Proofpoint TA505 October 2019ATTACK:enterprise:S0460 → uses → ATTACK:enterprise:T1059
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c14e629a-c0cd-4600-873b-924d04d8b627
Proofpoint TA505 October 2019ATTACK:enterprise:S0460 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d56e3076-7221-4e3b-8628-d8c50982892d
Proofpoint TA505 October 2019ATTACK:enterprise:S0460 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--db9384b2-ea34-4dd9-8554-e01b1606e7ce
Proofpoint TA505 October 2019