DanBot
Software · ATTACK:enterprise:S1014
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1014",
"title": "DanBot",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1014",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--b8d48deb-450c-44f6-a934-ac8765aa89cb",
"external_id": "S1014",
"domain": "enterprise",
"created": "2022-06-03T14:35:23.246Z",
"modified": "2024-04-11T02:42:34.540Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "SecureWorks August 2019",
"url": "https://www.secureworks.com/blog/lyceum-takes-center-stage-in-middle-east-campaign"
}
]
}Explicit source assertions (15)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1053.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--08c8fe77-b0b9-45e7-a2bf-e09257fa83f7
SecureWorks August 2019ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1617d3d7-77c9-4a6b-bdd6-8914e0890495
ClearSky Siamesekitten August 2021ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1021.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--31994fdc-6f52-4052-9748-d2bd3ea60caa
ClearSky Siamesekitten August 2021ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4272f467-c1b9-412e-9092-6340f4bdf847
SecureWorks August 2019ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--44cda13f-01b1-4fd2-8fbc-7de746c00d65
ClearSky Siamesekitten August 2021ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--57c8dc86-93a0-43d6-a47c-f0f5892948b3
ClearSky Siamesekitten August 2021 · SecureWorks August 2019ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1071.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5c45d533-4299-47a0-9a3b-7085c219ba6a
SecureWorks August 2019ATTACK:enterprise:G1001 → uses → ATTACK:enterprise:S1014
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5ffa504a-4458-49af-affd-f392bf5dd0ef
SecureWorks August 2019ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--626fcdd2-aaef-4670-ac9e-112c59151f95
SecureWorks August 2019ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6bfbee18-c771-4260-b460-8058dbc5c08a
SecureWorks August 2019ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1566.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--721320d4-36f0-4449-8331-8fbe40b1dba5
SecureWorks August 2019ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--79d38aef-d99a-4abc-a643-c334e41173f7
SecureWorks August 2019ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1059.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9366e845-6a49-44f4-abb6-c2cada6dff5a
SecureWorks August 2019ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aa64ac0b-3c22-41ad-bcd5-ee56d59de503
ClearSky Siamesekitten August 2021 · SecureWorks August 2019ATTACK:enterprise:S1014 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d0146a8e-8658-40c4-8232-bec51e1ab9a2
SecureWorks August 2019