down_new
Software · ATTACK:enterprise:S0472
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0472",
"title": "down_new",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0472",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--8be7c69e-d8e3-4970-9668-61de08e508cc",
"external_id": "S0472",
"domain": "enterprise",
"created": "2020-06-10T19:37:49.361Z",
"modified": "2025-04-25T14:43:58.304Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Trend Micro Tick November 2019",
"url": "https://documents.trendmicro.com/assets/pdf/Operation-ENDTRADE-TICK-s-Multi-Stage-Backdoors-for-Attacking-Industries-and-Stealing-Classified-Data.pdf"
}
]
}Explicit source assertions (11)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0472 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0efece7a-dc3a-46e1-b56c-7db9e3b61149
Trend Micro Tick November 2019ATTACK:enterprise:S0472 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--14de629c-9b49-4841-901a-85fab61f693b
Trend Micro Tick November 2019ATTACK:enterprise:S0472 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--215c28bd-3698-4962-b8a9-c632f27c9c82
Trend Micro Tick November 2019ATTACK:enterprise:S0472 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--29be6a34-6a89-42e8-a6b1-dca821ed7f94
Trend Micro Tick November 2019ATTACK:enterprise:S0472 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--56e4717c-33ac-4d7e-a737-71aa520af93e
Trend Micro Tick November 2019ATTACK:enterprise:S0472 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--785d0d93-1500-40b5-9f71-9d51aadef914
Trend Micro Tick November 2019ATTACK:enterprise:S0472 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bea01073-649a-4b27-a9f5-72533faae8cc
Trend Micro Tick November 2019ATTACK:enterprise:S0472 → uses → ATTACK:enterprise:T1518
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c61ca699-62e8-4c42-b20c-3c042c0fb153
Trend Micro Tick November 2019ATTACK:enterprise:S0472 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dd002813-b9b0-435f-8fb1-ee015c401280
Trend Micro Tick November 2019ATTACK:enterprise:G0060 → uses → ATTACK:enterprise:S0472
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ebab1ba1-e02b-41ab-8682-5a44d68fb155
Trend Micro Tick November 2019ATTACK:enterprise:S0472 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f874b527-e973-40f2-89cb-2c7feab5b6b4
Trend Micro Tick November 2019