Mafalda
Software · ATTACK:enterprise:S1060
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1060",
"title": "Mafalda",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1060",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--3be1fb7a-0f7e-415e-8e3a-74a80d596e68",
"external_id": "S1060",
"domain": "enterprise",
"created": "2023-01-26T01:21:43.409Z",
"modified": "2025-10-21T22:47:45.475Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "SentinelLabs Metador Sept 2022",
"url": "https://assets.sentinelone.com/sentinellabs22/metador#page=1"
}
]
}Explicit source assertions (37)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1205.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--16a59f96-4c5c-4625-a776-61162ac9c6c1
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1134.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1703b260-35ef-466a-bec7-d17d6c6cf987
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1133
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b7c7d72-1858-4e36-a96b-6377272daf70
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1685.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2d66a88f-f50e-4749-aa17-6c4b1f552648
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2efd43af-7571-4fd6-81cd-c26d7f769133
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--31bec3b7-5bb1-4a10-ab7c-4e82d67a0643
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--35317fb7-9426-4f6e-9c78-64bb7a2da67f
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1552.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--373f2bc5-e221-459e-9922-27bead9a53fe
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1569.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--395cee0e-ee8b-4e90-b2a7-f3a271ef0b1a
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3f424011-cde1-4ed5-b067-3cb4d6193d72
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1074.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--421fd048-a5c3-46b0-b1ff-a7510c107879
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--48316ab6-0019-47ad-b751-3b7efce756f2
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4975b6f9-c542-4ad9-bfeb-6182c4db895f
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4c13f346-bdd9-4759-b1a8-1f3a38c6055b
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1090.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--54b14853-fe7e-484e-ac14-849da168706c
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--69b6cf6f-f018-4999-b640-fc5a3cb2aa2d
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1056
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6eb97f82-c49f-465d-b788-15a789f928b5
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--780cdc6b-9f3e-4b10-9110-b64e0e02922c
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1049
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--79c992f3-9df2-4ea0-a63f-690409f5faca
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7ad999fd-9d57-40d3-b942-d8749a6f46cc
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1217
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--87590696-bf1c-4d42-8ef7-851fb10d8053
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--89574823-b59e-4a8e-87b1-8bbb9531b603
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8fbcd4e8-d2b5-408c-8b3a-1e990833705b
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8fd3fb7d-29be-4199-87e4-6fb270925ab1
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--91cea20a-9698-4bec-8fdd-c1eda3ea66e7
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--995aaffc-947a-4674-825f-9b6d53b7aefc
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9c057a7e-c815-4d43-a250-6696dc3691e2
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a3849766-140d-4dc0-86ca-1e3ad38c15b5
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a38fd59c-489b-4d3a-b3be-54fe89244c71
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1134
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c353c2cd-cc78-4d7c-a3b0-5aa1d927368b
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cb0632ef-fb36-44c1-916c-4de7ce1c956e
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cb11835b-c16e-4877-8769-806277b994fc
SentinelLabs Metador Sept 2022ATTACK:enterprise:G1013 → uses → ATTACK:enterprise:S1060
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cc604330-0936-4292-bb45-40c1d865c27b
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1622
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cce43f73-d564-4c60-9492-52b3f7039b7b
SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cd7cda5b-ad63-433e-a47d-abbd6dca5f41
SentinelLabs Metador Sept 2022 · SentinelLabs Metador Technical Appendix Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cfc3d427-79bb-41d1-8336-aa1365555d0f
SentinelLabs Metador Sept 2022ATTACK:enterprise:S1060 → uses → ATTACK:enterprise:T1003.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e40421c6-cf5e-4e99-8259-07dcc1234365
SentinelLabs Metador Technical Appendix Sept 2022