aol.pm

Cuba

Software · ATTACK:enterprise:S0625

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0625",
  "title": "Cuba",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0625",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--6cd07296-14aa-403d-9229-6343d03d4752",
  "external_id": "S0625",
  "domain": "enterprise",
  "created": "2021-06-18T22:05:58.411Z",
  "modified": "2025-04-25T14:43:42.282Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Cuba"
    },
    {
      "source_name": "McAfee Cuba April 2021",
      "url": "https://www.mcafee.com/enterprise/en-us/assets/reports/rp-cuba-ransomware.pdf"
    }
  ]
}

Explicit source assertions (23)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1680

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--059a2b6f-2b77-4f71-acd4-a3c39c4c2da4

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1543.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0a8d1f91-445a-4260-83b2-e13725b0a8d6

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1027.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1161865b-7120-4ca3-a4dd-6d1ee0e02609

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1106

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1326a801-6937-42ab-9916-e142ccc64261

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1614.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--19f3cd7b-3a05-452f-8198-1efdf8207684

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1486

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2212e364-d161-49ba-9a3f-a4e9e2260b2e

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1135

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--268e786f-a23c-4bf3-a331-e2b9163b2974

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4fb1988e-d8f5-41fb-9dde-7ad864acfd51

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--53d47656-2154-4e25-82f9-3dcecd37a05a

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1620

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--586b8b1d-109f-4f35-bcf8-589993d18681

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1059.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5b62e906-a48a-4897-82cf-49a947782780

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--61a3d7e0-3663-4fb7-9bb3-20a73257f27d

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--633959b9-383c-486d-9e36-520e5afc502d

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--64eedc04-9dca-4e47-9465-a3d0b51d02f1

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1027

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--662f14ec-90c6-48f7-98c6-ba028ca38621

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1489

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--677ec8f6-e06d-4d84-82de-af20953450ec

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7b4b7094-25fc-4556-8706-191d1ca04610

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1049

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7c859c07-f840-42da-958f-4c6af48a2498

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--974cd5a0-3519-4488-a935-06a0ef498f46

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c253f0c5-1802-4853-b93f-c426d2a48fae

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1134

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c280ba3f-7210-4608-b895-d29932938fe7

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1036.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ed136275-95b7-4f46-914c-a7f964558278

McAfee Cuba April 2021

ATTACK:enterprise:S0625 → uses → ATTACK:enterprise:T1564.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fa0705b0-8006-4e73-9a7c-aa051320f8b4

McAfee Cuba April 2021

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.