Samurai
Software · ATTACK:enterprise:S1099
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1099",
"title": "Samurai",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1099",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--ae91fb8f-5031-4f57-9839-e3be3ed503f0",
"external_id": "S1099",
"domain": "enterprise",
"created": "2024-01-04T20:01:26.144Z",
"modified": "2024-01-04T20:02:49.672Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Kaspersky ToddyCat June 2022",
"url": "https://securelist.com/toddycat/106799/"
}
]
}Explicit source assertions (20)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--62435a47-3830-4518-9c9f-1f0d25711907
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6c0f270a-cf44-4d71-a398-1d822f1d48ac
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1543.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7060f9a3-aeea-41bc-a5bf-549e33334fdd
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7943f92f-8956-4bb9-9f92-c932fb267b19
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7d95669c-e4e9-40d5-a36b-cadbc922270d
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1027.015
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--83069106-073a-4cd9-8b37-b101ed60f3ff
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--983073e5-9115-46c2-ba78-17e1c111916d
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1027.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aaecf1d4-46fb-4528-b150-6919db3bfde7
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b2ec264b-8490-406f-b239-db5b150a138f
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c4179f06-f1e8-432c-81db-c88b3a37f0bc
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d4ac3315-4b5c-4373-a7ea-0c389545f4a3
Kaspersky ToddyCat June 2022ATTACK:enterprise:G1022 → uses → ATTACK:enterprise:S1099
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d86f1575-e31e-49db-a66d-b0364b819873
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1090
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d8e8d071-fa60-4b6d-a0a4-dc6102f229c8
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--da6385c2-53f2-40b5-b487-a40d2c613d8d
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e01490ed-7252-41a7-b9ac-84b2892934d6
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1027.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e7b1f1f9-feba-45be-b48e-b8acae13a841
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f785ff3b-923c-478e-a194-c13c6bdbf071
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fcacc3e1-f343-4013-97cf-ce5d5f700c13
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ff5d439a-c480-45cc-be0c-2fac7f786eda
Kaspersky ToddyCat June 2022ATTACK:enterprise:S1099 → uses → ATTACK:enterprise:T1518
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ff6c2e20-53c1-4840-8bc6-e404e627ad82
Kaspersky ToddyCat June 2022