MgBot
Software · ATTACK:enterprise:S1146
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1146",
"title": "MgBot",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1146",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--a36eedea-9523-4abb-96e8-205f171ee763",
"external_id": "S1146",
"domain": "enterprise",
"created": "2024-07-25T18:16:57.099Z",
"modified": "2024-10-10T14:34:23.655Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "ESET EvasivePanda 2023",
"url": "https://www.welivesecurity.com/2023/04/26/evasive-panda-apt-group-malware-updates-popular-chinese-software/"
},
{
"source_name": "Szappanos MgBot 2014",
"url": "https://www.virusbulletin.com/virusbulletin/2014/02/needle-haystack"
},
{
"source_name": "Symantec Daggerfly 2024",
"url": "https://symantec-enterprise-blogs.security.com/threat-intelligence/daggerfly-espionage-updated-toolset"
}
]
}Explicit source assertions (18)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1056.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0dc3db64-17d3-4a1e-9f11-5e974d28db4f
ESET EvasivePanda 2023 · Symantec Daggerfly 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--118542b5-248a-475d-9eae-78efa872b399
Symantec Daggerfly 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1087.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--18cccfc2-e5a7-41ca-93ad-4ffef966b50b
Symantec Daggerfly 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1ef7da45-bf8c-4483-865e-2a1d58f57bb0
Symantec Daggerfly 2023ATTACK:enterprise:G1034 → uses → ATTACK:enterprise:S1146
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1fa88d4c-9597-47bf-bbee-44e34761ae7e
ESET EvasivePanda 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1555
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--20ed819f-4312-48ea-bb52-357243ab192a
ESET EvasivePanda 2023 · Symantec Daggerfly 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1087.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b55e889-243f-412b-b5cd-fa1d59f1a999
Symantec Daggerfly 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1213.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3db3aaaf-a736-4110-8fd4-51c6cc80a34b
ESET EvasivePanda 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1555.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--416dfc14-ae33-49f7-8084-d35dee036dc1
ESET EvasivePanda 2023 · Symantec Daggerfly 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5bc845de-8364-46ae-b8c2-ca78e9601fdf
ESET EvasivePanda 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1025
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--74e09d88-36e4-4332-9a25-3d5f19db1bfb
ESET EvasivePanda 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1482
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--79ad0030-3301-4063-866f-4947531ff8c0
Symantec Daggerfly 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1115
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--85ec27f0-77c3-4896-9934-cac7b73c87e9
ESET EvasivePanda 2023 · Symantec Daggerfly 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1539
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9ffa7daa-ce47-4333-87ac-e438b7556b0c
ESET EvasivePanda 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1018
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a3742518-c231-4492-9673-95e095badddf
Symantec Daggerfly 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b1931423-21a7-441b-b0c4-5db519b302ad
Symantec Daggerfly 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1046
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c32ad752-3f38-4f34-b00d-c892d8698f0b
Symantec Daggerfly 2023ATTACK:enterprise:S1146 → uses → ATTACK:enterprise:T1123
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fc622e1d-cbbe-4d8e-b184-ebd23581ec71
ESET EvasivePanda 2023 · Symantec Daggerfly 2023