Pillowmint
Software · ATTACK:enterprise:S0517
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0517",
"title": "Pillowmint",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0517",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--bd7a9e13-69fa-4243-a5e5-04326a63f9f2",
"external_id": "S0517",
"domain": "enterprise",
"created": "2020-07-27T14:06:29.560Z",
"modified": "2025-04-16T20:38:33.297Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Trustwave Pillowmint June 2020",
"url": "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/pillowmint-fin7s-monkey-thief/"
}
]
}Explicit source assertions (16)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1546.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--09896887-98ee-4e8a-9cc2-4203b3b561c8
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1055.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2dfd662a-231a-4b4c-b7e6-b61058fc4494
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--332ce4cd-311a-457f-ae10-6d8e3ef7bc77
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3454bb10-fad3-48b6-b20a-81cb45e7bbc1
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--426db174-3cc4-4f9c-ae34-6398a86ec3bd
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1027.015
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--536d2d4b-e700-4353-9cfa-bacf25512225
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1027.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--690d1b72-9fb0-426a-9db4-075abf045688
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1070.009
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7e6700e2-4a06-4583-933b-53d3a2761af7
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8977c8db-64e4-44b5-bee9-362779624a42
Trustwave Pillowmint June 2020ATTACK:enterprise:G0046 → uses → ATTACK:enterprise:S0517
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--95d8ef7d-47b2-438d-921c-902dbb3467bb
Trustwave Pillowmint June 2020 · CrowdStrike Carbon Spider August 2021ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9ac9325d-067d-4936-9c8d-159e21bd04c4
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a8a65990-8385-440b-8733-940a69b05f4e
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--abece522-51dc-4904-b0f9-585db7fb0223
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bcd496b7-7e6a-483b-b1d4-f7dc935a563d
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d0c8b03f-7c57-4156-bc5e-cd0c45327ef3
Trustwave Pillowmint June 2020ATTACK:enterprise:S0517 → uses → ATTACK:enterprise:T1560
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--efea6d26-7372-45bb-81bb-1e300abd5b13
Trustwave Pillowmint June 2020