SplatDropper
Software · ATTACK:enterprise:S1232
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1232",
"title": "SplatDropper",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1232",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--6114c345-4c09-42ce-8d37-aef16360a7f3",
"external_id": "S1232",
"domain": "enterprise",
"created": "2025-09-12T14:46:05.125Z",
"modified": "2025-10-21T16:56:26.801Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
]
}Explicit source assertions (9)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1232 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--20d9e1a0-835e-4aaf-80d0-4db5ad4d8dae
Zscaler PAKLOG CorkLog SplatCloak Splatdropper April 2025ATTACK:enterprise:S1232 → uses → ATTACK:enterprise:T1574.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b1831a6-22e1-4ddb-8b39-00c1ebeeb6de
Zscaler PAKLOG CorkLog SplatCloak Splatdropper April 2025ATTACK:enterprise:S1232 → uses → ATTACK:enterprise:T1027.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--39e90371-f87c-4f20-85b0-a273e2203489
Zscaler PAKLOG CorkLog SplatCloak Splatdropper April 2025ATTACK:enterprise:S1232 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6aefb15c-c452-436d-b4db-07b8c9e2f416
Zscaler PAKLOG CorkLog SplatCloak Splatdropper April 2025ATTACK:enterprise:S1232 → uses → ATTACK:enterprise:T1553.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8d97f8dc-0c9e-43f2-af23-fe260e702cda
Zscaler PAKLOG CorkLog SplatCloak Splatdropper April 2025ATTACK:enterprise:S1232 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ab5fd28f-c304-46a2-a07d-c037dc67ba2c
Zscaler PAKLOG CorkLog SplatCloak Splatdropper April 2025ATTACK:enterprise:S1232 → uses → ATTACK:enterprise:T1070.009
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b34a39aa-6b5d-4595-bfa8-2305ec7362a8
Zscaler PAKLOG CorkLog SplatCloak Splatdropper April 2025ATTACK:enterprise:G0129 → uses → ATTACK:enterprise:S1232
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d9b5190b-b2af-4673-8a19-b65744b70125
Zscaler PAKLOG CorkLog SplatCloak Splatdropper April 2025ATTACK:enterprise:S1232 → uses → ATTACK:enterprise:T1543.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dca00879-658b-4fe9-aaf8-990e0eae063a
Zscaler PAKLOG CorkLog SplatCloak Splatdropper April 2025