Torisma
Software · ATTACK:enterprise:S0678
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0678",
"title": "Torisma",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0678",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--0715560d-4299-4e84-9e20-6e80ab57e4f2",
"external_id": "S0678",
"domain": "enterprise",
"created": "2022-02-01T16:21:13.097Z",
"modified": "2024-04-10T22:31:28.094Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "McAfee Lazarus Nov 2020",
"url": "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/operation-north-star-behind-the-scenes/"
}
]
}Explicit source assertions (14)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--00f44cd5-9afc-472f-9743-251d243798a0
McAfee Lazarus Nov 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0872f093-cfab-4e63-bfde-b7748808c96f
McAfee Lazarus Nov 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0b6312e1-2601-4bb3-ba21-ee1c488b3506
McAfee Lazarus Nov 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1a192f9a-d515-4d5c-9c52-e904bac96f61
McAfee Lazarus Nov 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--21900cf5-72e2-4661-b137-0753710b4f9d
McAfee Lazarus Nov 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--261937ca-8c05-430a-9c85-280b78505f65
McAfee Lazarus Nov 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1480
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--37599333-0974-4442-976e-6f8d8c3ceac7
McAfee Lazarus Nov 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1049
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--438c4a38-3043-4697-8490-d63fcbc63cd8
McAfee Lazarus Nov 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--512b3fed-39aa-407d-b274-5a65229688b7
McAfee Lazarus Nov 2020ATTACK:enterprise:C0022 → uses → ATTACK:enterprise:S0678
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5687f6c6-f749-456e-a7fe-179017d50e9b
McAfee Lazarus Nov 2020 · McAfee Lazarus Jul 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7226ed2f-506e-4608-913f-953aca532413
McAfee Lazarus Nov 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--773ba80b-0dbc-4ed9-9fbb-bcfef08da01d
McAfee Lazarus Nov 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--88a4b1b5-770c-4af3-afe8-bd98076f448f
McAfee Lazarus Nov 2020ATTACK:enterprise:S0678 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f5cc5037-067a-4e29-90c4-775152d76a8f
McAfee Lazarus Nov 2020