metaMain
Software · ATTACK:enterprise:S1059
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1059",
"title": "metaMain",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1059",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--df350889-4de9-44e5-8cb3-888b8343e97c",
"external_id": "S1059",
"domain": "enterprise",
"created": "2023-01-24T00:12:34.751Z",
"modified": "2024-04-11T00:45:31.029Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "SentinelLabs Metador Sept 2022",
"url": "https://assets.sentinelone.com/sentinellabs22/metador#page=1"
},
{
"source_name": "SentinelLabs Metador Technical Appendix Sept 2022",
"url": "https://docs.google.com/document/d/1e9ZTW9b71YwFWS_18ZwDAxa-cYbV8q1wUefmKZLYVsA/edit#heading=h.lmnbtht1ikzm"
}
]
}Explicit source assertions (29)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1dfbbbe3-c04d-4ad6-98bf-15a9cd84ab06
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2a82c4cf-5c04-41b9-bfa4-c5e00d288eed
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--387d5cbe-8862-45c1-9577-c1424b072283
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1074.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4126e124-fb28-4274-a687-dc5344b34859
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--45ef2a23-61b6-4f78-9d86-58a2d50a4ee0
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1546.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--46e81587-e960-4277-9c3b-af2bdc328176
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1620
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--507d0a52-450a-4bb9-8667-e787f8c589f2
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--51b34c1f-4e2f-4bb7-98a1-fa90ed873eba
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5998186f-20af-4b30-8ae7-4d4648d96327
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1560.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--609a0483-ac4a-49d6-bc5d-3cb0ff6e8a97
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1056
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--69d4f4f9-adb0-41fc-952d-88579ab5b46b
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--73675ce7-d059-424a-9f8f-683188b19017
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--77c31f47-883a-4381-a70e-96bd5f1371d3
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9cff1625-8af8-4337-8e8e-a4c0606b6381
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1497.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a03c46d1-763a-40e8-952b-36b27be11dda
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a08900f6-65be-4022-8ad8-fe6c6c91c1d0
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac0de65d-dc44-4575-a175-167e9c85cde9
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ae2aeca3-098f-42f2-a35e-e0d206ba84f7
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1090.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--af9720b7-fef3-4b8d-b2ad-073355523866
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1574.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b5dfef8a-32b2-481f-a55d-0bbfbebfc872
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:G1013 → uses → ATTACK:enterprise:S1059
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bcdf1f9a-536d-4f86-a265-66b55ba0b7c7
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bd2c2f6f-5bc1-4150-b618-3b53b037670f
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c3c78b2e-a53e-4020-8fba-6e63c73e0b76
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1056.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e39aaec3-2473-4986-9278-eb1e880d127d
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e4fa961c-e72b-47b3-b0fb-8051f9ca4d63
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1070.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ecbe0204-b205-47d5-ba6a-ef5c29737eda
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1055
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ed7582ee-c131-4525-8e69-26e9e5646328
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1205.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fbaf2482-7ab9-4feb-bb88-06646559d9ca
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1059 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fcad9dc8-fa79-491e-91ec-35a2a9cd55e8
SentinelLabs Metador Technical Appendix Sept 2022