yty
Software · ATTACK:enterprise:S0248
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0248",
"title": "yty",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0248",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--0817aaf2-afea-4c32-9285-4dcd1df5bf14",
"external_id": "S0248",
"domain": "enterprise",
"created": "2018-10-17T00:14:20.652Z",
"modified": "2025-10-22T03:06:38.183Z",
"version": "1.3",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "yty"
},
{
"source_name": "ASERT Donot March 2018",
"url": "https://www.arbornetworks.com/blog/asert/donot-team-leverages-new-modular-malware-framework-south-asia/"
}
]
}Explicit source assertions (15)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0da384db-9a5b-4256-81b4-19df05a4ceb8
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0efc2bef-9227-4af2-b73b-bfa61a3073aa
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1053.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1ebc312e-68a4-4119-94c5-79897a5bf5b4
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1102.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--234dc427-cce0-45d5-9971-02890aff608d
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1027.016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--37533c33-9cc4-4707-8b30-d8be6aeaefc6
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1018
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3c021bb7-e96b-4a87-931b-d74f19ec8bcb
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--48eff76f-1f39-49e8-87c2-11607a8aeea3
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1497.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4f644120-7b96-4234-b81a-3160b34bca87
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5caffa87-adbb-45e8-ba6b-dc61188471a7
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8732cda7-068e-439d-a25a-1b056363d1f7
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--abf00a6a-7922-432c-95e0-6c44db2c20e3
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1056.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b2f180de-6c03-41cd-a6ed-a49ac674740b
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b81d449d-9ebd-4fb8-a77a-bb6bca93581b
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cbb27eed-2e1c-4675-a077-28765060b349
ASERT Donot March 2018ATTACK:enterprise:S0248 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f9841bd6-ec35-423f-8b47-3f215fda197a
ASERT Donot March 2018