SideTwist
Software · ATTACK:enterprise:S0610
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0610",
"title": "SideTwist",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0610",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--df4cd566-ff2f-4d08-976d-8c86e95782de",
"external_id": "S0610",
"domain": "enterprise",
"created": "2021-05-06T14:44:50.494Z",
"modified": "2025-04-25T14:44:52.304Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Check Point APT34 April 2021",
"url": "https://research.checkpoint.com/2021/irans-apt34-returns-with-an-updated-arsenal/"
}
]
}Explicit source assertions (16)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0b097893-c35a-4e75-ad26-d13ca0fd8b61
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0b71ce5b-7174-4491-8890-c699d93907e7
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--36c4252b-fc24-467e-b56b-56ba29bb4026
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4256a056-d15a-4323-8e04-92e623d5e899
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--44a9f8e6-7b16-4c19-a1ac-df57a67b329a
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--56d8c364-ef22-485c-961f-e3c9782cc6df
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6b47884a-47ac-4f0a-9d5b-3c6eb0efd761
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8c79800f-4f3c-41ad-8d35-7d11c6cd65b3
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--984047c3-43fc-41ad-8d8c-ea585452bc30
Check Point APT34 April 2021ATTACK:enterprise:G0049 → uses → ATTACK:enterprise:S0610
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--99ec87aa-5e07-4d47-8d29-6614850c88b5
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9dcec42b-174d-4b74-8aab-c5727a71c25c
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9fb48ae2-125f-48f8-a813-8e64cf70bde3
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--abdaccd2-6a3e-4bd2-8fa2-b192f67f22ca
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ae81a84a-e7a6-4f9d-b412-3f91b012f052
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d68f3474-8ba0-45e8-8876-3b1dd8a56fbf
Check Point APT34 April 2021ATTACK:enterprise:S0610 → uses → ATTACK:enterprise:T1001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f0782cdb-1b7a-4e23-acb4-dba55ad03468
Check Point APT34 April 2021