Skip to content

Clambling

Software · ATTACK:enterprise:S0660

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:S0660",
  "title": "Clambling",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0660",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--6e95feb1-78ee-48d3-b421-4d76663b5c49",
  "external_id": "S0660",
  "domain": "enterprise",
  "created": "2021-11-12T20:54:55.974Z",
  "modified": "2025-04-25T14:43:43.008Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Trend Micro DRBControl February 2020",
      "url": "https://documents.trendmicro.com/assets/white_papers/wp-uncovering-DRBcontrol.pdf"
    }
  ]
}

Explicit source assertions (35)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1125

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--07939f42-c9ce-442f-a922-6c3560ac5ddc

Trend Micro DRBControl February 2020 · Talent-Jump Clambling February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1095

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0b932e1a-e0a1-4123-bcfe-6957b9ef2409

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1564.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--11180322-a9e0-4f20-94e1-d47f95db06f8

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1102.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--17d85f51-c89f-440c-be28-5f74d9264723

Trend Micro DRBControl February 2020 · Talent-Jump Clambling February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1113

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1957974e-1995-4d35-a32b-e355ae219ff8

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1497.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--26802b94-95bf-4d01-a552-81069e62131a

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--27f4a7f3-7086-471d-8826-7bc544069c44

Talent-Jump Clambling February 2020 · Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--292fd2a5-45fa-4125-84ea-8b5f341dc579

Trend Micro DRBControl February 2020 · Talent-Jump Clambling February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3777379a-469f-453e-a270-450c8b1eba9b

Trend Micro DRBControl February 2020 · Talent-Jump Clambling February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1204.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3db909a5-8ae8-4ab4-9aa9-910e90155cf3

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1567.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--43300665-e487-470f-a3ec-2aaeb76b2a5f

Trend Micro DRBControl February 2020 · Talent-Jump Clambling February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1027

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--57c72f80-38bf-48b4-9f5d-eefef4025e34

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1569.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5c0b2098-6f0d-4c99-ac9d-bb3ea4ca9d52

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1055

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--666f1286-c25b-49ef-9d86-42a00ea69ab1

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--67f3f607-8c27-4a90-b1bf-e84f75815a42

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1115

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--744da30b-d540-4512-85c7-d32310e2aa78

Trend Micro DRBControl February 2020 · Talent-Jump Clambling February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--873b5347-7147-46fc-b94c-5b6deaeb56f4

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8b4c7113-2f11-44a7-863d-1ff49ae64215

Trend Micro DRBControl February 2020 · Talent-Jump Clambling February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1135

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8e744873-e85e-4b7c-b36c-96448e600c43

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1071

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--924d69bd-a87f-4fda-a2cb-73355331aa87

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1056.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--96f31a7f-76d9-4aa6-81b7-cc4656213657

Trend Micro DRBControl February 2020 · Talent-Jump Clambling February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1055.012

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a821988a-269f-452b-ab59-5cbb3357f2f6

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1140

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ae788f2a-e2d8-4615-8714-f1263c987b23

Trend Micro DRBControl February 2020 · Talent-Jump Clambling February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b0147ed6-a725-4899-82dd-4675aeecbd72

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1124

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b6f54741-1424-4a3c-b83e-1c94df063186

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1112

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bef96df2-cc94-414d-8144-4c4875c59751

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c3c323ed-e3db-495c-b9b4-c00ada5a37fe

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1548.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c4734977-e231-46cd-91c8-ce4be580d543

Talent-Jump Clambling February 2020 · Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1543.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cc7f6dcb-dae0-401b-ba21-158c040c717e

Talent-Jump Clambling February 2020

ATTACK:enterprise:G0027 → uses → ATTACK:enterprise:S0660

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d226d631-b611-450e-b904-aad115bbe77a

Profero APT27 December 2020 · Trend Micro Iron Tiger April 2021 · Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1033

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dd06865b-d8fa-4626-8ebd-e75289377c4c

Trend Micro DRBControl February 2020 · Talent-Jump Clambling February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1059.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--df7d9316-0cf4-4f20-9169-f4952478cc60

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e5543556-e531-4c9a-aab1-31a18a7ed5f8

Trend Micro DRBControl February 2020 · Talent-Jump Clambling February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ec8c7897-1e29-4a55-b212-3dce350a8ad8

Trend Micro DRBControl February 2020

ATTACK:enterprise:S0660 → uses → ATTACK:enterprise:T1574.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f044fed9-e7d4-4cb2-938b-d89fd8b0c06c

Talent-Jump Clambling February 2020 · Trend Micro DRBControl February 2020

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.