aol.pm

Remexi

Software · ATTACK:enterprise:S0375

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0375",
  "title": "Remexi",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0375",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--ecc2f65a-b452-4eaf-9689-7e181f17f7a5",
  "external_id": "S0375",
  "domain": "enterprise",
  "created": "2019-04-17T19:18:00.270Z",
  "modified": "2024-04-11T00:17:12.008Z",
  "version": "1.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Securelist Remexi Jan 2019",
      "url": "https://securelist.com/chafer-used-remexi-malware/89538/"
    }
  ]
}

Explicit source assertions (17)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:G0087 → uses → ATTACK:enterprise:S0375

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2a37ddb3-56ef-4c2d-bec7-d6060eb0215a

Symantec Chafer Dec 2015 · Securelist Remexi Jan 2019 · Symantec Chafer February 2018

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1053.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--387fa1e2-b8c5-4be4-b566-85b0525ed294

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--47d79025-5c64-4524-b8b7-d70c341972f9

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4df0f8e9-5956-4ccf-b603-00c32afee0d0

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1041

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--551c4e98-3dfb-472b-8fa8-6a8961dfd418

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1027.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--555ae36b-6066-43e1-bea4-d891c1db5835

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1115

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5940076b-120a-4588-b227-7fe2bc9f7ccd

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--64f1da46-93a7-4e70-8702-801dbaf26206

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6ad392c7-3fc3-46d4-b479-5862e11a81d8

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1047

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--84221e86-8ed7-42d4-878f-951cc6eaf65c

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1140

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--85b0be36-c9fb-4359-b9b6-4e13300e374b

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1547.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9cae28f1-dbae-406b-b205-ab9c9cbd26f5

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b2cf2404-a612-4832-8dff-9f5572776785

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1560

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b516dc1a-69c7-4dd2-935a-b0b1dcee150f

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1059.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d08b9cb8-0f97-4933-b0de-40e4626dd13e

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1113

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d5b4ef43-ddb4-4f95-95b9-6a352700bb77

Securelist Remexi Jan 2019

ATTACK:enterprise:S0375 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--df0cfac5-fe50-4cc3-bc47-9a1d49c53e0a

Securelist Remexi Jan 2019

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.