aol.pm

ZxxZ

Software · ATTACK:enterprise:S1013

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S1013",
  "title": "ZxxZ",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1013",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--97cfbdc6-504d-41e9-a46c-78a9f806ff0d",
  "external_id": "S1013",
  "domain": "enterprise",
  "created": "2022-06-02T12:27:33.899Z",
  "modified": "2024-04-10T20:29:50.729Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Cisco Talos Bitter Bangladesh May 2022",
      "url": "https://blog.talosintelligence.com/2022/05/bitter-apt-adds-bangladesh-to-their.html"
    }
  ]
}

Explicit source assertions (15)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1106

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0a3c7f91-6020-46f8-be45-d0a8cf86956e

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:G1002 → uses → ATTACK:enterprise:S1013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0aa994e4-f1a3-4c14-b5e0-f2f6247d6630

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0bde7434-49de-40c4-906c-fc5f3bfc6d16

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--13a3b832-a680-4c50-b413-c8137a6a89b5

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--16e1777b-af28-412b-bcc3-469aba0f8a87

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1518.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--382d78e9-c653-4d0d-aab6-c154152f6f1c

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1036.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--452ebe8a-fc71-42e2-994f-2a974ab16c8d

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4e5de254-8dd4-46cd-a8af-8cdfd335e5f1

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1027.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4ee9fd95-d2c8-4d34-87d2-bf1f5ef54061

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1053.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5859c58f-fc6a-4a08-ac8b-96fd21175814

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1204.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7e93778d-1f69-4705-b544-b0e80d889267

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d095926f-b161-46ea-ac52-b7295ce42b80

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1033

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d979c181-32f5-4977-8ca9-30a1edc595c0

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dfb3ddf9-7683-4d88-ba40-eab0f87a3a8c

Cisco Talos Bitter Bangladesh May 2022

ATTACK:enterprise:S1013 → uses → ATTACK:enterprise:T1140

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f649505a-555f-4939-980e-916a511c3134

Cisco Talos Bitter Bangladesh May 2022

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.