PipeMon
Software · ATTACK:enterprise:S0501
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0501",
"title": "PipeMon",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0501",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--8393dac0-0583-456a-9372-fd81691bca20",
"external_id": "S0501",
"domain": "enterprise",
"created": "2020-08-24T13:15:51.706Z",
"modified": "2024-04-11T00:26:37.214Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "ESET PipeMon May 2020",
"url": "https://www.welivesecurity.com/2020/05/21/no-game-over-winnti-group/"
}
]
}Explicit source assertions (24)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1134.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--125d8dab-512b-445a-9f28-b2113c714b77
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--270c93ba-a3d4-4ace-8fad-691c64c13e2f
ESET PipeMon May 2020ATTACK:enterprise:G0044 → uses → ATTACK:enterprise:S0501
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--33344564-0586-47fa-965f-ec9b4a462491
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--33823f15-f43f-41ef-bc14-7dea2ab21acf
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--37451dee-6837-46c5-a9e5-ff64f26f66d2
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3e18f486-1e6f-49fa-8b99-4daf615d3e8d
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1055.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4d5f07bd-985d-4dee-8f1b-9143fb158438
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1547.012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--74bc9883-6d48-4e68-bc61-1fea450e89e7
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7b510a6f-3e11-49b3-bf97-a1ca24bca663
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1548.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--88111958-702b-4bfb-9ad1-c329491df5be
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8ead6aa1-dbbe-4e8f-b542-66af9b5f2c33
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--96f5f2ec-28e6-4ed4-853e-9c6cadbe3dda
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9bfcecc9-1a59-427c-9189-59a19c58e201
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1134.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a979f700-7319-4d37-bb3e-592e3a1bf878
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d2bc4516-c074-4d44-9931-07ab518de60a
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dfea8f12-5c47-4a11-a4ed-06d08192b9ab
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1027.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e27416ae-e9f1-4b3f-90b2-6cb4a1a6abf4
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1543.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e7cf27d5-f5ab-497b-8379-31730292ed81
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1553.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ec536758-9478-4bf9-9abd-69755d8382d2
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ecca736a-9b3f-4a1d-bdb8-ff5c55197893
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ee4e5ea3-3d81-42ab-b259-9970f1f7d736
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ee8af4e9-8f2e-453f-82d2-d43861d9371e
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f3afa419-b741-4a1c-bb4d-569cde6ab558
ESET PipeMon May 2020ATTACK:enterprise:S0501 → uses → ATTACK:enterprise:T1129
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f77738b8-e17c-4b6b-98fc-ffcc569cc008
ESET PipeMon May 2020