Grandoreiro
Software · ATTACK:enterprise:S0531
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0531",
"title": "Grandoreiro",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0531",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--958b5d06-8bb0-4c5b-a2e7-0130fe654ac7",
"external_id": "S0531",
"domain": "enterprise",
"created": "2020-11-10T21:13:44.259Z",
"modified": "2024-04-11T02:25:51.549Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "ESET Grandoreiro April 2020",
"url": "https://www.welivesecurity.com/2020/04/28/grandoreiro-how-engorged-can-exe-get/"
},
{
"source_name": "Securelist Brazilian Banking Malware July 2020",
"url": "https://securelist.com/the-tetrade-brazilian-banking-malware/97779/"
}
]
}Explicit source assertions (43)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1059.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--03a8b070-a7dd-43b0-a044-1cf9f999475b
Securelist Brazilian Banking Malware July 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1204.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0be595fa-a284-4657-a1bd-9b22e56b6604
IBM Grandoreiro April 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--13ab9b58-b18a-437f-898e-fc598e8d0939
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1547.009
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--17a834a6-8d77-4fee-bd02-539d93f6fa5c
IBM Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1539
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1e526bd3-f353-4b05-a9c9-1f8ddc59bc33
IBM Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--213522ec-117d-4ac8-82c7-b297fe7c26b4
IBM Grandoreiro April 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1573.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2843712c-cf5a-45f0-9e08-444665e0d479
IBM Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1102.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2ad63ab0-fb5b-4bce-8bbb-bf765d324fd6
Securelist Brazilian Banking Malware July 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2d882b40-11c3-4b7e-a400-5e87ae2bd899
IBM Grandoreiro April 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2e53dad4-17cc-4fe6-a3b9-d622075d78f7
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1102.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--30e68a86-bbfc-4677-9815-b256be560f09
IBM Grandoreiro April 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3c662aa7-0ee8-4e42-b0b9-de0dc2f02a57
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1222.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--47266bcb-b16a-4d95-9c10-bfc48b2f5a8b
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4786019e-e2d4-4d31-94fa-b9ec19e65fa4
ESET Grandoreiro April 2020 · Securelist Brazilian Banking Malware July 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--509a61b8-292e-4292-b4e8-c1c9901582ec
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5463f157-7cab-4e9d-bb68-6179972087b6
IBM Grandoreiro April 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--54e6596d-ca80-4406-93f3-5fab013bc913
IBM Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--57de7812-f3b0-44d1-9548-856a26278568
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1010
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5adc78d2-a013-4a4e-afda-9a7dd38fb5fa
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1027.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5f488c35-1d8c-4596-985c-11f0ee37b004
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1087.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6231644a-5a32-4458-b950-444f84e1b476
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--68fc9cf1-d191-4ebd-af14-004519ab76d7
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1027.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6ab65410-25e5-4eef-8a38-06630aa4386b
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1218.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6dca4adf-499d-4cea-b3df-48566ff6deeb
Securelist Brazilian Banking Malware July 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--716975f1-af44-4d45-af4e-29ad68ce3fb3
ESET Grandoreiro April 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1185
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7ac62413-be9a-40ef-996d-017c04f04d5b
Securelist Brazilian Banking Malware July 2020 · IBM Grandoreiro April 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1056.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--80a95235-abd0-4911-abca-91ec1f7e27d3
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--855c7acd-9fa1-48a3-af4a-16de53499c3b
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1497.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8ba9be70-d849-4f64-94b8-edc4384605a5
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1685
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8bcde5a5-1ef2-4ea5-bb5a-fa8c5d8fcae9
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1115
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9e1742a1-ffc0-4e29-88d2-04ef30a13358
IBM Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1176.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a09c5b62-cd6f-40e4-b614-99b3f29de0f5
IBM Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ade847d9-4ce6-4b63-accb-7070c926e5b5
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1189
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bb23e7d5-23d6-4dde-a67f-36e19e8d2250
Securelist Brazilian Banking Malware July 2020 · IBM Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1686.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c1b233f3-87f7-43e8-8185-0c6aa0e1b959
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1548.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c1b5ad09-6b1a-487e-bec1-af2326be5007
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ceebecd3-5cab-40fd-8020-f5cb06f3ccd7
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d06c864f-e4b8-484d-8e75-76a480509665
ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1568.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d2b70f03-3c52-4bf9-b545-7b912348f55e
Securelist Brazilian Banking Malware July 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e337f1d2-0729-48e0-8e8a-8fd372b81aa5
IBM Grandoreiro April 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1566.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ea7cd259-9065-4762-b7e1-f17d42b4af67
IBM Grandoreiro April 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1555.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eadd5ace-0afb-4812-8834-e0dd56b9b129
IBM Grandoreiro April 2020 · ESET Grandoreiro April 2020ATTACK:enterprise:S0531 → uses → ATTACK:enterprise:T1686
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f0690af9-5784-4f63-983a-a6d8747f9d32
ESET Grandoreiro April 2020