Skip to content

Hildegard

Software · ATTACK:enterprise:S0601

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:S0601",
  "title": "Hildegard",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0601",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--40a1b8ec-7295-416c-a6b1-68181d86f120",
  "external_id": "S0601",
  "domain": "enterprise",
  "created": "2021-04-07T18:07:47.604Z",
  "modified": "2024-04-11T02:18:41.342Z",
  "version": "1.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Unit 42 Hildegard Malware",
      "url": "https://unit42.paloaltonetworks.com/hildegard-malware-teamtnt/"
    }
  ]
}

Explicit source assertions (28)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1071

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--24f1177a-971a-457f-a9b6-36de5fc65d42

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1552.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2c50e260-05dd-4bb3-9d75-5a84e2757fa7

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--33d66657-3e4c-430b-ae40-a9d310f39f13

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1609

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4428158e-cf07-49f0-8a9f-5cc767027e2a

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1613

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--457ee5f7-ec8f-4990-bfe0-8cf0a6e70b1f

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1574.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4a607e33-3970-4605-af5e-36be82bd142a

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1046

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4c1c2160-0b1d-4bb9-be29-e0c6e0570a2d

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1133

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4c595f86-f839-44a3-81c8-8a1cab9f4293

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1552.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--50a1a87a-31cf-4a98-96f6-276f35798185

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1027.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5344358d-8558-44b1-910d-cbb6d1aae714

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1036.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--718851be-6d2e-4073-86e1-d331198e2bc3

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--810630f3-01fb-416d-992c-3f5a0390d962

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1102

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--81fcae09-a738-4922-9553-aad21e2b940b

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1685

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--85301e49-dfb0-4dff-aa16-b76840c27515

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1014

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8f5fdbbc-73b1-48a6-9916-67c0baa0f66e

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1070.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9bfac7bf-f5a7-4e43-99c6-fb1a86c0dbe3

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1219

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a0084acb-4ede-4dac-af86-857d5f381dac

Unit 42 Hildegard Malware

ATTACK:enterprise:G0139 → uses → ATTACK:enterprise:S0601

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a822d946-b839-469a-90bf-fbe699faf160

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1140

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ac5693ea-3d10-47bd-b91b-a65177dd5462

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1496.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ae8d16f8-ba51-4b17-987b-5fbeedfc1780

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1136.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c832fb66-57f5-40cb-94aa-ad788a4aad39

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cdd9ae58-bed9-4cce-ad46-d4e96a789ded

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1552.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ced41648-7201-4eb8-aaae-c376e05af519

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1027.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e09fd624-7298-4bd0-8a38-90ba0eec6fbd

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1543.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--eff691e3-85de-4b98-8534-da2333370856

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1611

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f47bdd6d-d8d4-450f-b6ff-30da690621b3

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1068

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f7e5f676-46e1-4241-b0bb-fb32d891896a

Unit 42 Hildegard Malware

ATTACK:enterprise:S0601 → uses → ATTACK:enterprise:T1059.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f90759fc-14cb-4f29-a2b6-221d6fb0e884

Unit 42 Hildegard Malware

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.