Ferocious
Software · ATTACK:enterprise:S0679
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0679",
"title": "Ferocious",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0679",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--73d08401-005f-4e1f-90b9-8f45d120879f",
"external_id": "S0679",
"domain": "enterprise",
"created": "2022-02-01T19:19:26.408Z",
"modified": "2025-04-25T14:43:45.868Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Kaspersky WIRTE November 2021",
"url": "https://securelist.com/wirtes-campaign-in-the-middle-east-living-off-the-land-since-at-least-2019/105044"
}
]
}Explicit source assertions (10)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G0090 → uses → ATTACK:enterprise:S0679
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--22e9c279-0cb2-4ad1-85b2-37826f20db1f
Kaspersky WIRTE November 2021ATTACK:enterprise:S0679 → uses → ATTACK:enterprise:T1059.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--699bbb0a-3b06-4def-ad89-994c8981fa28
Kaspersky WIRTE November 2021ATTACK:enterprise:S0679 → uses → ATTACK:enterprise:T1120
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6b15c0bd-7b39-408b-91fa-cf942a52a933
Kaspersky WIRTE November 2021ATTACK:enterprise:S0679 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--700e46f0-0c55-4b5b-8f12-d4ead13b03d3
Kaspersky WIRTE November 2021ATTACK:enterprise:S0679 → uses → ATTACK:enterprise:T1546.015
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8604868a-8226-4c03-a5b2-bedfc4020865
Kaspersky WIRTE November 2021ATTACK:enterprise:S0679 → uses → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a08b1776-efe3-4304-9dba-dc977fc934cd
Kaspersky WIRTE November 2021ATTACK:enterprise:S0679 → uses → ATTACK:enterprise:T1497.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c5d72f44-5b9c-4927-a232-6cd81fdbcc13
Kaspersky WIRTE November 2021ATTACK:enterprise:S0679 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c6172742-12ae-4d3f-9fd6-194cfdc93de7
Kaspersky WIRTE November 2021ATTACK:enterprise:S0679 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ccb912dd-ed1f-4844-9bc0-75a033fa8813
Kaspersky WIRTE November 2021ATTACK:enterprise:S0679 → uses → ATTACK:enterprise:T1112
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d52b8760-abba-46f0-8c82-653b95cb2775
Kaspersky WIRTE November 2021