TajMahal
Software · ATTACK:enterprise:S0467
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0467",
"title": "TajMahal",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0467",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--b51797f7-57da-4210-b8ac-b8632ee75d70",
"external_id": "S0467",
"domain": "enterprise",
"created": "2020-06-08T14:57:32.842Z",
"modified": "2025-04-25T14:44:28.616Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Kaspersky TajMahal April 2019",
"url": "https://securelist.com/project-tajmahal/90240/"
}
]
}Explicit source assertions (24)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1560.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--120b6ead-4c4a-4f99-8509-d4ae3d4afea6
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1125
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--15c3f3a3-03c9-4591-a2d2-64b5eafbd4a7
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--179538d1-5770-42ef-976f-c0fd65faa1ea
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3edc3698-c8a9-4212-b34e-1f3a44fbd00d
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1123
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--404dfda0-7019-4f0e-a831-4b7c594916e8
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--44aab0bc-80d5-4c6b-9acf-ceb9cc30f443
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1119
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5197fd7a-766f-45da-87f5-c469377460d1
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5c160f0c-1c12-4ab0-bd6e-a30f8d5bc168
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--655005cc-a289-4878-8dc0-64f0c7d167c4
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7f31ac80-5e21-4449-8bb3-9c2ad943dc08
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1518
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8455e704-68fd-4610-b63d-0d124a660802
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--91c175b7-5c8e-4534-82b1-9bdb1b709a34
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--97e042c8-f1fe-4980-bc08-86cb7c6e1fc9
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1020
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9cc4cd5d-7b10-4dd7-8fd9-90288aa8b5be
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1129
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b4ef6c6e-d7aa-451a-b071-faf0138cfbff
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1539
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b9b622ad-856a-48f9-a768-ef05bd2914fe
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bfd1c3ca-ea2c-4b0e-8b0a-815b8ebb4dfb
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1055.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c7d6694e-cfbf-4883-9f4c-8fb3f187e6ae
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1025
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cad9bdcc-41b3-44e2-98d2-fb07fe268838
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ea05b76d-c443-4b41-8d02-d90b965bd184
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1056.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eda8746d-ef63-450b-ab75-c2c97d94db44
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1120
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ee1558f7-5b93-49c7-89c8-b3151cbefb84
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1115
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f283af63-1fdf-49d3-8a56-304c5be07a83
Kaspersky TajMahal April 2019ATTACK:enterprise:S0467 → uses → ATTACK:enterprise:T1027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f43dedfa-261d-41af-bb74-e1f2eff5cbae
Kaspersky TajMahal April 2019