Skip to content

SILENTTRINITY

Software · ATTACK:enterprise:S0692

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:S0692",
  "title": "SILENTTRINITY",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0692",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "tool--1244e058-fa10-48cb-b484-0bcf671107ae",
  "external_id": "S0692",
  "domain": "enterprise",
  "created": "2022-03-23T19:34:30.486Z",
  "modified": "2025-04-30T13:26:45.728Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "SILENTTRINITY"
    },
    {
      "source_name": "Security Affairs SILENTTRINITY July 2019",
      "url": "https://securityaffairs.co/wordpress/88021/apt/croatia-government-silenttrinity-malware.html"
    },
    {
      "source_name": "GitHub SILENTTRINITY March 2022",
      "url": "https://github.com/byt3bl33d3r/SILENTTRINITY"
    }
  ]
}

Explicit source assertions (53)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1552.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0f43dcda-56ff-4ac2-b79a-82b09a90944f

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1620

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--13763af4-357d-4bb4-b0eb-64f8808792e6

Github_SILENTTRINITY

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1069.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1991b422-2f89-4b90-9cea-7c34919eec05

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1b16de68-c627-4f38-a85f-bbba2fef7e20

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1546.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1c40e6c8-1a0e-41f7-8aa7-9ae294712fbe

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1115

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1ff3e957-905e-4d2b-b893-c280052bbe30

Github_SILENTTRINITY

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1070

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2123bedd-f2b3-4856-9ee4-5d23aa9c8745

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1003.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--277ac06b-0bb0-4384-b275-df180922b790

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1135

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--348d10f4-8519-47a0-89d4-24119c18b638

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1564.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--393b11b3-cf22-48e0-afb6-e9c05411b400

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1543.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3efd847d-47ec-4460-ad63-6233b177ee64

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1069.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--46b32cc8-892c-48da-92ab-4ec2168e3edb

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1685

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--47bef4ea-597e-4827-b55f-c189aa67c928

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1113

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--494a0c44-2822-4f53-977e-f36a949d8258

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1047

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--533a2f2c-6cc9-48fa-b029-17cc827e12d7

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1055

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5bf6d81e-634d-4035-a895-87d2d31341ce

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1112

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--60202ca3-cadc-4756-99c8-a4b18e07d116

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1124

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6316bedb-6962-4da1-8714-08b414fa7c73

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1546.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--670dc748-f1c8-4ba3-b999-f942fa42ce50

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1134.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6b5705c3-4508-4623-b542-1fb1fbef2a47

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1556

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--70f37bdd-dd94-46de-b41b-dd5e04997d3b

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--75a89128-fcdd-4bcf-98a7-9f0ea162a794

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1689

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7a68af11-adbf-46a7-909c-f2c0ab2d16e5

Github_SILENTTRINITY

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1087.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--800b5705-d504-41af-86cb-252c6b3e267f

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1018

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--80b87eab-243c-4e98-a85e-2684520f8824

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1690

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--82a7206d-4f55-4f1e-a6e1-3e652daac444

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--858db34b-48b3-4ab2-ac9c-ee09475d29c5

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1134.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--865146d9-3654-4a18-ac9a-aba9bb7a265d

Github_SILENTTRINITY

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1059.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--87400414-05c2-42a7-9db5-fbbac101146d

GitHub SILENTTRINITY March 2022 · GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1046

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--87ebb077-671c-42b2-ad27-07f54b5920be

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1059.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8835056d-c12a-4036-9028-7b8d867f2d79

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1555.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8e2cd29d-5d72-450d-8697-d7121e1b2e8d

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1106

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9002b775-c016-404f-b9b3-16fcbcd0949c

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1558.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--91dc0049-df2a-4dc0-b6b4-863a9a733c7a

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1546.015

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--962b8434-1beb-4774-bb9e-3a5b10d84fe3

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1041

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9f5398d3-f9fe-4abc-bf10-1112f106b3d5

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1555.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bc0367d2-ad95-4197-b3b4-432e8bba6fec

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1021.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bcef3835-1388-4bb7-850b-d248f4c1810f

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bee5895c-6671-4563-831b-38cb510e29fe

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1680

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c08ad736-dcd5-465c-92b6-54213ab69614

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1548.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c65da10e-8b5b-4290-87a4-cbc3120bf99c

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1559.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c8b5bdf8-3d26-4ed7-ad0d-54e6a35a5d59

Github_SILENTTRINITY

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ce4c8a4a-793f-48ba-b194-312e54f378d0

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d80a85fa-5261-4274-b50e-bb82461562af

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1021.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--db1f0baf-27ee-4e1c-9d8f-6a82918b5f0f

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dd6eca67-574c-433a-8764-12cc802a0387

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e0495ed2-62d6-4fd7-9c9b-e57d3c99fd9a

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1056.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e6553c0d-9f67-412a-8e72-fad7059c35b1

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e6a21902-3d34-444c-a528-f86b764375e9

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1033

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ec6dc634-8214-4817-aabb-30ffb19ad4cc

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1518.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f27f75b5-824d-43c9-a029-247d7d44ec8f

Security Affairs SILENTTRINITY July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fbe4387a-5e79-45e0-aae1-9b3a53dcd3ee

GitHub SILENTTRINITY Modules July 2019

ATTACK:enterprise:S0692 → uses → ATTACK:enterprise:T1007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fd68dcb1-686c-4e48-9b6c-26c98a4f43e5

GitHub SILENTTRINITY Modules July 2019

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.