Aria-body
Software · ATTACK:enterprise:S0456
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0456",
"title": "Aria-body",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0456",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--3161d76a-e2b2-4b97-9906-24909b735386",
"external_id": "S0456",
"domain": "enterprise",
"created": "2020-05-26T19:36:04.663Z",
"modified": "2025-10-22T02:32:48.657Z",
"version": "1.3",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "CheckPoint Naikon May 2020",
"url": "https://research.checkpoint.com/2020/naikon-apt-cyber-espionage-reloaded/"
}
]
}Explicit source assertions (25)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0997f41a-0232-4331-8a11-11a6433d8343
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0ed0ef18-126f-4a03-ac2a-f315dfb48b7d
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1681f4aa-4bb1-482a-8fdf-8c1b724635d9
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1568.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--17bfea1d-e3c8-4bf9-8102-576e7c87883e
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--26303f07-87f0-4740-b6ea-e81e8c01b267
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1025
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2995ea85-ccdb-4378-bc35-3c62ccf5fa9d
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3a24f6ef-80e2-48b9-8f00-36ca4f59f191
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1134.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--48e9217d-e93d-440f-9fa1-93116e5792bd
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--49badb38-7e44-4dd6-85b2-91bb281385a0
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--535b87bb-31fd-4e14-8279-c64c301e912d
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--549c2737-1097-4a16-8d4b-01ad0e3e689f
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1010
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5ab058a1-4c88-481f-a7a8-77855ee916e6
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5fdd0fba-8d1d-411a-b47b-3e5aae512892
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--61bf5c24-e7ae-4178-916d-d236e928b897
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--76701e52-cfce-4294-91e4-485fad7c8f0f
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--914406e6-9388-477d-ba6b-97e5ebec31f0
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1134.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a5848e5c-0a64-44f2-9432-4d503baea628
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1090
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c7f1b492-eea7-45d1-ab78-6794c7560c67
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cbb686ae-3dc8-4e91-80fc-075209505425
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cbc2cb80-8f07-46dd-b167-3f237e39f39d
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1055.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ed113911-e21a-4b1b-a082-42313d5aa887
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f8bf7fa5-3af6-4770-ae87-022154a9378e
CheckPoint Naikon May 2020ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1560
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fa77baa1-a258-4059-aa84-6822fe023d70
CheckPoint Naikon May 2020ATTACK:enterprise:G0019 → uses → ATTACK:enterprise:S0456
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fd8fa359-c13e-4641-9c3e-d03218daee0c
CheckPoint Naikon May 2020 · Bitdefender Naikon April 2021ATTACK:enterprise:S0456 → uses → ATTACK:enterprise:T1049
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ff87edd7-34b1-47f2-9131-dd6a47854805
CheckPoint Naikon May 2020