TinyTurla
Software · ATTACK:enterprise:S0668
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0668",
"title": "TinyTurla",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0668",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--2a7c1bb7-cd12-456e-810d-ab3bf8457bab",
"external_id": "S0668",
"domain": "enterprise",
"created": "2021-12-02T15:09:20.899Z",
"modified": "2025-04-16T20:38:00.312Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Talos TinyTurla September 2021",
"url": "https://blog.talosintelligence.com/2021/09/tinyturla.html"
}
]
}Explicit source assertions (15)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1573.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--16d07e92-1026-4d2f-ad4d-a1cb664d1278
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1a471326-20d2-41e2-8dc5-dd9d9ce5a7e1
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1e1045dd-0ae7-427e-a205-d41c88b0a5d9
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1569.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2ebf0505-4b0a-4e17-b303-b860585f7c11
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2f603550-4368-4f34-89d9-50f69eed2fa9
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5c2fe9e9-cb7e-418a-84f1-9966854b4c27
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--72ec975a-43b4-4766-a2f4-385b6112858d
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1027.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--73aee1df-5faf-456f-8bde-74b531c1c2b9
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1036.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7e588158-1962-42d4-b836-0a2c764fdc5e
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1029
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a6af8abf-a60f-47f7-9112-aa527db087c7
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b33486bc-c7f4-46d7-9e20-3863c5508820
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b4642810-53c4-4ff2-859f-f4b707a36097
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b7c40c13-6b20-4470-a715-04b5fa01ef24
Talos TinyTurla September 2021ATTACK:enterprise:S0668 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e6f09187-694f-4be9-9617-e93ab25ff9a7
Talos TinyTurla September 2021ATTACK:enterprise:G0010 → uses → ATTACK:enterprise:S0668
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ec1a882a-b9d1-469f-b944-26d684b28a1e
Talos TinyTurla September 2021