Metamorfo
Software · ATTACK:enterprise:S0455
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0455",
"title": "Metamorfo",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0455",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--81c57a96-fc8c-4f91-af8e-63e24c2927c2",
"external_id": "S0455",
"domain": "enterprise",
"created": "2020-05-26T17:34:19.044Z",
"modified": "2024-04-11T00:44:30.028Z",
"version": "2.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Casbaneiro"
},
{
"source_name": "Metamorfo"
},
{
"source_name": "Medium Metamorfo Apr 2020",
"url": "https://medium.com/@chenerlich/the-avast-abuser-metamorfo-banking-malware-hides-by-abusing-avast-executable-ac9b8b392767"
},
{
"source_name": "ESET Casbaneiro Oct 2019",
"url": "https://www.welivesecurity.com/2019/10/03/casbaneiro-trojan-dangerous-cooking/"
}
]
}Explicit source assertions (46)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1059.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--07f72efd-7960-4530-92f3-6ced33087212
Medium Metamorfo Apr 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1518
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--082b64f6-cc70-4bc8-a49f-bf0f125883f7
FireEye Metamorfo Apr 2018 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1056.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0c2259d0-2d56-4bbc-bd98-e35ac991b6e8
Fortinet Metamorfo Feb 2020 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0f5c39a8-edc1-4da2-941a-56e17b32abe4
Fortinet Metamorfo Feb 2020 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1573.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--104334fa-4d32-48ab-a55d-c481ce7c4cd3
Medium Metamorfo Apr 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--168f47ab-980f-4e10-91f4-ffd2acf09a7f
Medium Metamorfo Apr 2020 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1218.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--184ee176-b599-4586-b1fc-5758c91a0c23
Fortinet Metamorfo Feb 2020 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--21cd565f-4cdc-46d6-95b3-32b2d618674e
FireEye Metamorfo Apr 2018 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1055.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2e418dd3-d6dc-4d02-a555-2b3a13936dc3
Medium Metamorfo Apr 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1102.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--34fb0f39-9aef-4b49-8a80-2ca457af8565
ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3a299dae-7ee2-4e5e-8be6-eb014f58205b
Medium Metamorfo Apr 2020 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3c132a1b-053d-450b-8a4f-cabf30317075
Medium Metamorfo Apr 2020 · Fortinet Metamorfo Feb 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1574.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--44533bc7-0368-4269-b465-7e08d3a8beea
Medium Metamorfo Apr 2020 · ESET Casbaneiro Oct 2019 · FireEye Metamorfo Apr 2018ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1566.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4852a801-3cd3-4a97-90ef-8cb5974c80d9
FireEye Metamorfo Apr 2018 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4a990ccb-7004-43b8-9328-37668e1a3b6d
Medium Metamorfo Apr 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4bd30351-b64b-47cb-897b-951b76ca668b
FireEye Metamorfo Apr 2018ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4be5482c-2a58-41af-a7d7-477c596b4622
Medium Metamorfo Apr 2020 · ESET Casbaneiro Oct 2019 · FireEye Metamorfo Apr 2018 · Fortinet Metamorfo Feb 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4e18e63e-acb5-48fc-8935-eb4416929745
ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1070
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5246b52e-cb6c-43da-84e5-dff0172abaea
FireEye Metamorfo Apr 2018ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1056.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5a56cf34-c344-4b2a-ac9e-4f08f049d7ce
FireEye Metamorfo Apr 2018ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1497
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6176ae5b-cd96-4b15-8539-5fb6e230fd5d
Medium Metamorfo Apr 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--667c0879-3ea2-48f1-9a1b-ceefca33aa43
Medium Metamorfo Apr 2020 · Fortinet Metamorfo Feb 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--676c5a2a-323b-4166-9c83-8c6e5e25bb1f
Medium Metamorfo Apr 2020 · Fortinet Metamorfo Feb 2020 · FireEye Metamorfo Apr 2018 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1102.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--68e18f32-aae3-4bd6-b8e5-6ec2ec3d4173
Medium Metamorfo Apr 2020 · FireEye Metamorfo Apr 2018 · Fortinet Metamorfo Feb 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1119
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6caff042-f300-421c-b6c8-6c8dd6d69f1b
FireEye Metamorfo Apr 2018ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1571
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6cc8e1ce-c007-4a26-bd3b-cac73bb98c73
FireEye Metamorfo Apr 2018ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1218.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7643698c-2dc4-43ca-9d90-c656962dfecb
FireEye Metamorfo Apr 2018ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1115
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--787f09c0-92fe-4208-96e8-86c8e45c9a40
Fortinet Metamorfo Feb 2020 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1129
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--79cb18f3-0640-4b9d-9e93-62e3300f99d8
Fortinet Metamorfo Feb 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8a8afe63-a754-40e3-98af-cfc3f0aa6ef5
FireEye Metamorfo Apr 2018 · Fortinet Metamorfo Feb 2020 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1565.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ad7b6185-bdb1-4271-b139-2d71dd85c0d4
Fortinet Metamorfo Feb 2020 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b5d200f9-2b85-46c8-980a-0692e49ccdfc
FireEye Metamorfo Apr 2018 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1553.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--baeb8449-b956-4119-aea5-717570edb513
Medium Metamorfo Apr 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c7735813-64b9-47ba-8d98-81e7bfc25a80
Medium Metamorfo Apr 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c9747fcc-b249-49cc-8f8b-aad9e89bdc31
Fortinet Metamorfo Feb 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1685
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cc536085-c3d8-4a94-8db4-bdd942dfecfc
Medium Metamorfo Apr 2020 · FireEye Metamorfo Apr 2018ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1010
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ce071226-7abc-492c-918d-96cc195f928d
FireEye Metamorfo Apr 2018 · Fortinet Metamorfo Feb 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cea7b276-d2be-4af4-adaf-28eb26079098
ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d6829fd4-7c9b-495f-9689-d1be1939f99e
Medium Metamorfo Apr 2020 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--de745ef4-59a0-470c-95c9-5043a717dc54
Medium Metamorfo Apr 2020 · FireEye Metamorfo Apr 2018 · Fortinet Metamorfo Feb 2020 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eac61f60-a87d-4f83-b5e0-64542efeca6b
Medium Metamorfo Apr 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eeccfd34-bc7a-4a94-bc27-3f5f20063ee7
ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1059.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eed0e9c9-f849-4938-b243-5f6692d94b6b
FireEye Metamorfo Apr 2018ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1564.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ef934eda-a3ad-40fb-8923-fc2f72fb8f6e
Medium Metamorfo Apr 2020ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f264330f-3c9f-4a2a-a6f6-904a9139bbf5
Medium Metamorfo Apr 2020 · FireEye Metamorfo Apr 2018 · ESET Casbaneiro Oct 2019ATTACK:enterprise:S0455 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f45f18e9-4a0c-4f22-8ef6-5a18314535ea
Medium Metamorfo Apr 2020 · Fortinet Metamorfo Feb 2020 · FireEye Metamorfo Apr 2018