SynAck
Software · ATTACK:enterprise:S0242
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0242",
"title": "SynAck",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0242",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--04227b24-7817-4de1-9050-b7b1b57f5866",
"external_id": "S0242",
"domain": "enterprise",
"created": "2018-10-17T00:14:20.652Z",
"modified": "2025-04-25T14:42:32.305Z",
"version": "1.3",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "SynAck"
},
{
"source_name": "SecureList SynAck Doppelgänging May 2018",
"url": "https://securelist.com/synack-targeted-ransomware-uses-the-doppelganging-technique/85431/"
},
{
"source_name": "Kaspersky Lab SynAck May 2018",
"url": "https://usa.kaspersky.com/about/press-releases/2018_synack-doppelganging"
}
]
}Explicit source assertions (14)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0dba319b-0d1e-4c73-8153-9ce13d27c98c
SecureList SynAck Doppelgänging May 2018 · Kaspersky Lab SynAck May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--109b2118-d714-41bb-a39d-b1fd1b755b55
SecureList SynAck Doppelgänging May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--142ef662-460f-4082-8f76-f08dd312bc30
SecureList SynAck Doppelgänging May 2018 · Kaspersky Lab SynAck May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2fededb7-e713-495c-a317-919c037434a8
SecureList SynAck Doppelgänging May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1497.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--36b27959-d265-4fb6-b33b-3a1e74d43206
SecureList SynAck Doppelgänging May 2018 · Kaspersky Lab SynAck May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3e58118d-64b9-43ae-bfd8-cb3c8bf19556
SecureList SynAck Doppelgänging May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1055.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--41ac0542-9215-466a-ba43-05bd8b9e330b
SecureList SynAck Doppelgänging May 2018 · Kaspersky Lab SynAck May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--699e964d-b8c8-46fd-bd2d-9787433ab077
SecureList SynAck Doppelgänging May 2018 · Kaspersky Lab SynAck May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--69c3aaaf-0922-4662-a8b3-026dc5ea0aae
SecureList SynAck Doppelgänging May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1486
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8c1c7c51-f9bf-4163-a01b-7d922a2d1a93
SecureList SynAck Doppelgänging May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--97a083ff-40ef-4e4c-9837-4ab1537a063c
SecureList SynAck Doppelgänging May 2018 · Kaspersky Lab SynAck May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1685.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c430c59d-5998-4c8d-88de-4a05175197ff
SecureList SynAck Doppelgänging May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1614.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cfed60a3-c288-4c12-bfe2-2c0234a3cfa7
SecureList SynAck Doppelgänging May 2018ATTACK:enterprise:S0242 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--da7fb67f-3cb2-498d-a832-f98622bc9ee2
SecureList SynAck Doppelgänging May 2018 · Kaspersky Lab SynAck May 2018