Operation Wocao
Campaign · ATTACK:enterprise:C0014
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:C0014",
"title": "Operation Wocao",
"type": "Campaign",
"source_url": "https://attack.mitre.org/campaigns/C0014",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "campaign--b03d5112-e23a-4ac8-add0-be7502d24eff",
"external_id": "C0014",
"domain": "enterprise",
"created": "2022-09-27T14:15:23.984Z",
"modified": "2026-07-31T18:47:30.910Z",
"version": "1.2",
"aliases": [
"Operation Wocao"
],
"tactics": [
],
"source_references": [
{
"source_name": "FoxIT Wocao December 2019",
"url": "https://www.fox-it.com/media/kadlze5c/201912_report_operation_wocao.pdf"
}
]
}Explicit source assertions (79)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0032f447-1ab7-427d-b7ae-baa436dc2411
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1003.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--02a05d88-504c-4b79-bc55-1174b02e62c2
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1056.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--034a2bc9-62a9-413f-b167-0b348928eba0
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:S0104
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--03affe06-c8b3-436d-84c2-b5943f37ff47
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:S0521
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0473a627-abe8-4cfe-9574-a15c1c33da29
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--07b15826-1fe3-42db-afdb-9f18e2c8ef2b
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1018
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0d7506cd-4869-48f9-a0e0-cb70d6b482ff
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1573.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0f8086c2-5432-455f-8012-201aed337725
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1587.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--107d896b-a618-42fe-a453-76bc4b7d7330
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--11ab0bc2-4baa-4d06-a001-2b59d3bc5567
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1555.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--13e7416a-7a02-438f-a708-598f132ea394
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1552.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1d2ee595-1972-46ac-bd85-322bdc5e35de
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1119
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--26088143-9fdc-4fb5-aa04-27ea21836da0
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1049
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--26aac288-6032-4925-afbe-506c8ea06300
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1585.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--27257b64-c32c-49cd-a4ce-f804c251829d
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:S0002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2a02ac13-c551-45ad-a4bc-2641d7f182ff
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--30ee835f-64a1-4e14-8c9c-648e24fc9b0b
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1571
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--30f0fc1f-d2fb-4bc8-98b1-431324127f07
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1686.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3218d9f3-7179-4e47-b68f-8ff2a4266bd2
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1111
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--381a628b-5401-43d0-853a-c2b0dbce83c3
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1190
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3a41f311-3961-4446-ad71-2a6f4e3561ec
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1090.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3d02f381-1402-430e-aacd-5e9350df2505
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1074.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3f564288-8695-4cbc-a8b9-813cb67e0f1e
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:S0183
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--401dcfac-ceda-4d72-b12d-20ffb5cae4a6
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--41c81917-ca17-4d7f-abdd-dcd408ad230d
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--45df3c58-de91-4f36-a094-44e52b077f41
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:S0645
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--49dd9dc3-b0b8-499f-8fad-177779d494df
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1569.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4d7faa7b-2fd2-4c40-89c2-e8171055733c
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4f6975b8-e16e-47ba-b241-b2267c5da4ef
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1115
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5093ddae-6bc9-401e-b35f-9f3139efafd0
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1583.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--576cbf79-037c-4265-af56-cd0d7a57c1b9
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1560.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6239c9a5-5ab9-425d-a767-0d4e6262a598
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--64c3c385-6e1f-438f-ba7e-ac7d79375ada
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:S0194
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--65376085-302c-4958-94b7-3582e30a3c0f
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1069.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--664d1aaf-eb98-4683-bc57-1a19934d934a
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1078
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--70879424-99b5-4ebe-8c77-cf872738dfcf
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:S0105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--73137a74-58b1-4d45-b6dd-e8b4fbfe6236
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1135
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7d7e63bb-1b78-459d-a300-d21bb270ad7d
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7e26e90e-79b1-45ab-94dd-ea7b35cffbf8
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1685.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7f746c17-946d-46c9-a2fe-7155b468f14e
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--80a8cd03-8f65-41fb-803a-64d92f9f1522
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1588.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8127487a-15fd-4802-8537-ddb2f72e72fd
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1558.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--827cbddc-3e19-4aff-a27a-5cce63812d44
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1021.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--82e1cb6f-7528-430f-8e8e-fc3213f25402
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1570
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--839d6bf7-6a63-48c0-8433-0d8d6c7ea61f
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1059.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--86d110ea-060e-462f-a520-ad650564c05e
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1016.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--88231281-0f0d-4655-b083-a90faf9056fe
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1087.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8d43c2da-0d5e-478a-aacb-b9da651854ce
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1078.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--94a6e104-9afd-4271-af39-6ab02eb53dfd
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1055
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--95d0ca69-0e05-4f68-ba95-99094f01e140
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9627b2de-6420-480f-add5-312622eb957c
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1589
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--96797e47-8984-40f8-ac55-af9fd0fecf55
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1059.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--971d6207-8f0f-4771-8f7e-a6aa9aadda1c
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--98b39362-d743-49be-b07e-748b19e12158
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1090.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9a462c0e-a60e-4983-8839-1f0e41cc133a
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1090
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9df6635a-b3ed-494c-845e-b743e494861c
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a778d83c-5452-49ff-87dd-dbd3ef0d380f
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a90a5b4d-b677-4a69-8fa0-feab294c9daf
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b3492594-4cb7-4c5c-a0b4-5054720e83fe
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1120
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b3f7d095-c7eb-4a4b-909d-e3b831c7ed16
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1003.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b4decb48-0877-418c-83cc-9967b369f5b2
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1027.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b71e1e23-5fc2-46af-ab0b-afa442c24b66
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1053.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b7c3b6c4-9f4b-4e11-92df-a4bb6e82a66a
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:S0029
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b8ca4610-ccb2-4e29-8478-8670413af4f9
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bc52cbe2-32a0-4491-aa57-46ef39e431b9
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1027.010
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c0a4bcc3-8e3c-4f92-8b87-db70483e10e4
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c2745621-0b03-4b9d-b2f7-4e3b80487f87
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1047
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c380f574-0f88-4481-84c2-f429bd47c84d
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1046
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c4693c3d-7ec1-4e6d-9788-b3aa39d97e10
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cbf2f9fe-e61b-4a04-a135-d1f6c4ec6cc3
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:S0357
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cbfd307e-ab23-49d0-bda0-83e883d4851a
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dfc90c30-4cc7-4f5f-8315-6a20c14696d9
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1133
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e132dd40-7779-44dc-9e4a-74514381407c
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1505.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e49ceb1e-8ab0-44c5-8232-2b9aa0cf17ad
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1518
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e848e92c-af22-4284-a27d-7c2673a4b0fe
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ed758a74-c91c-413d-a7a9-f09f697f4574
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ef203c63-b93c-413a-83ed-4785399f3a51
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1078.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f2064ee3-66e3-4856-a376-e34b2ec9f90f
FoxIT Wocao December 2019ATTACK:enterprise:C0014 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fe7c5c1c-b5b2-4770-911c-415839d5ede4
FoxIT Wocao December 2019