Skidmap
Software · ATTACK:enterprise:S0468
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0468",
"title": "Skidmap",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0468",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--4b68b5ea-2e1b-4225-845b-8632f702b9a0",
"external_id": "S0468",
"domain": "enterprise",
"created": "2020-06-09T21:23:38.995Z",
"modified": "2024-04-11T00:06:31.222Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Trend Micro Skidmap",
"url": "https://blog.trendmicro.com/trendlabs-security-intelligence/skidmap-linux-malware-uses-rootkit-capabilities-to-hide-cryptocurrency-mining-payload/"
}
]
}Explicit source assertions (16)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1496.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0bb4fb8a-0b0f-46c6-820b-d46c5f98fa12
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1098.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--13d595d2-9497-4bbe-be74-6e2a3a4dde06
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1eb0fe9c-86e9-4c8c-8a24-c7b139559971
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2329d963-f01b-46bd-8868-99cf436a508a
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--30c69dcc-9cf7-4352-a30c-0e7bc86b38e7
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1685
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3ee9c6bb-90c4-476d-b516-020113a65c62
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1053.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--40f49d74-4d0f-467a-be79-cd57559d8230
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--472c61e4-e839-4766-b1ce-d9095203e538
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--49f761f9-89d2-4e6f-a0c6-fc5e32cca471
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1547.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--513128aa-573e-4185-b0dc-88738edacb65
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1556.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--61cfe134-e24e-490e-a298-40612df42832
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--709d0737-e2ac-4ce3-9772-0dbc06f9667e
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1014
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--759185fe-d576-43f5-afac-acd653e5fcf4
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8ca0a20d-2c12-4b68-a2a9-ebd95c05ee68
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--952412b3-a7b1-402c-a92e-96830df4d14b
Trend Micro SkidmapATTACK:enterprise:S0468 → uses → ATTACK:enterprise:T1059.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b3bcdaeb-e4d7-403d-902e-df55aa5b6bb9
Trend Micro Skidmap