DUSTTRAP
Software · ATTACK:enterprise:S1159
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1159",
"title": "DUSTTRAP",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1159",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--33139388-de0c-49ff-862a-041c315b142d",
"external_id": "S1159",
"domain": "enterprise",
"created": "2024-09-16T08:38:41.404Z",
"modified": "2024-09-21T07:20:52.417Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Google Cloud APT41 2024",
"url": "https://cloud.google.com/blog/topics/threat-intelligence/apt41-arisen-from-dust"
}
]
}Explicit source assertions (31)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1087.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0136018a-db45-4517-9834-7261488bc3fe
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--018a5e33-ef18-4a6b-8389-c950053d4a75
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1615
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--14b74d2b-20c9-48b4-9894-f3ebeeff6d69
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1055
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--15ccaabe-9b15-4d30-8931-d86d9af9f911
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1056.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--30bbf24a-ee93-46e1-be89-d948f3248c17
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1070
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3a065510-e719-4048-aec2-99db1cae1f79
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--45258d6a-3717-4542-ac17-e7343fae0304
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4b9ee045-b369-4122-8743-a095f8a90ac5
Google Cloud APT41 2024ATTACK:enterprise:C0040 → uses → ATTACK:enterprise:S1159
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4dfb55e5-c8cc-4ace-b8e9-8f33bb4c72c3
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1087.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--57bf3d4d-788c-43f9-b35b-a76b68a0b02d
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5b6293d5-f49c-4dbe-bef3-73bb346c3fe4
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6207afcd-8cc6-4bee-aa2c-2218e30679b1
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--68501e6a-dba6-4a77-a711-99ca6918a2dd
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7a0da394-d797-4649-b9bf-1b5822ca3467
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7c7b8fe8-4dfd-4367-b4a7-22321938a3b3
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8f666cbe-d814-4702-9287-87648469141a
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9b39255f-16f4-4558-b7da-6a8b83e768eb
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac94eab0-5d4e-419d-806b-fb085a532f31
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1010
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b62a2a23-884c-431d-9f08-911d9ba66d48
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1070.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b7b10c48-dd31-4b9e-a833-87f1a412e6a4
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bccb0bfa-f105-4a07-8078-0bbb7adf9073
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bed5ccbe-02dd-4736-ac42-ce0cce7f6dad
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1482
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c6bdda33-7d5a-4dab-b6aa-464cfd63222a
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1685.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cc8cfe3a-ae1b-4827-adde-bd7412064b16
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d96e80d3-f4ca-40bd-ae69-979a0a782a57
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1027.009
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e0d78b1f-4c62-4537-af82-da7575f1fe9e
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1018
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e66503db-f92a-4795-a350-732a2f92b2cd
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1654
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f2a5153d-95fa-41b3-8d5f-d99d2b0b1aa4
Google Cloud APT41 2024ATTACK:enterprise:G0096 → uses → ATTACK:enterprise:S1159
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f5b60c41-242e-44c2-92c1-1f010e4471ad
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1497.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f66a0d09-cb4a-4fb5-9f83-b7316e3c7db7
Google Cloud APT41 2024ATTACK:enterprise:S1159 → uses → ATTACK:enterprise:T1135
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ff27aa33-f4da-424e-be51-ade535b359b3
Google Cloud APT41 2024