Kevin
Software · ATTACK:enterprise:S1020
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1020",
"title": "Kevin",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1020",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--e7863f5d-cb6a-4f81-8804-0a635eec160a",
"external_id": "S1020",
"domain": "enterprise",
"created": "2022-06-14T14:27:43.651Z",
"modified": "2024-04-17T22:07:06.736Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Kaspersky Lyceum October 2021",
"url": "https://vblocalhost.com/uploads/VB2021-Kayal-etal.pdf"
}
]
}Explicit source assertions (22)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1071.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--11c19a8d-fd24-4c59-9a5f-4910f5471e71
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1564.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--17ac7d6e-828c-4b8c-84de-4e0575f1703a
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--205b4267-e86d-46a1-8aa6-61475cd90b80
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1132.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--21295e0f-33f4-44dc-a649-87d0e55f8ed7
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b9ce635-3ce2-4145-864e-70b0b09438b8
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3fadfbe5-6ed1-4d6d-a5ed-a355506431ba
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--566913fd-3f30-4d33-b275-4a8c8f31a1c3
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1572
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5ee6a7c8-a9a5-4445-8173-408caab5bcbc
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1030
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--681857ae-6461-4070-a2b8-1fb53972ab38
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8db11ec5-cf4e-413b-a0b6-b6a84753d996
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--92b2d8ea-6a4d-4f23-b474-ccda6fb0bfd8
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--95ca9378-9ec1-43cb-9ffb-5f7c79cf7898
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--986db6f9-d2ad-4ab9-98b6-5633e101e804
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a36a52d4-3f2a-4f67-8da1-de9ecae18ed4
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1001.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a4da460a-10f9-4ae7-ac75-46460ba56f87
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a4e96b11-6f07-422c-bf18-9866ee6fb6a9
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1074
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a87a63cc-7920-4b23-a804-d1ad94ffc120
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1546.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--abf1b22c-a9a4-4155-832c-66878158db77
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b921077b-4a62-461c-aaec-9cd70b5cf5f8
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1497
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bb97930f-9c3a-4fac-84b1-8f954633aef0
Kaspersky Lyceum October 2021ATTACK:enterprise:S1020 → uses → ATTACK:enterprise:T1036.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d04af539-cfb6-4662-8d5a-82dc85cfab1b
Kaspersky Lyceum October 2021ATTACK:enterprise:G1001 → uses → ATTACK:enterprise:S1020
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e966a89a-eef3-4be4-9ea1-ded6da1315cd
Kaspersky Lyceum October 2021