aol.pm

DCSrv

Software · ATTACK:enterprise:S1033

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S1033",
  "title": "DCSrv",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1033",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--5633ffd3-81ef-4f98-8f93-4896b03998f0",
  "external_id": "S1033",
  "domain": "enterprise",
  "created": "2022-08-11T22:31:31.468Z",
  "modified": "2024-04-11T02:39:27.698Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Checkpoint MosesStaff Nov 2021",
      "url": "https://research.checkpoint.com/2021/mosesstaff-targeting-israeli-companies/"
    }
  ]
}

Explicit source assertions (9)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S1033 → uses → ATTACK:enterprise:T1036.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--07019af0-e801-48c7-a3bd-efc637003aa2

Checkpoint MosesStaff Nov 2021

ATTACK:enterprise:S1033 → uses → ATTACK:enterprise:T1543.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0c1acc71-87ca-4dc5-ba28-3d924bc1c93f

Checkpoint MosesStaff Nov 2021

ATTACK:enterprise:S1033 → uses → ATTACK:enterprise:T1529

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0ef5c336-794e-4700-b40e-c78eed74d353

Checkpoint MosesStaff Nov 2021

ATTACK:enterprise:S1033 → uses → ATTACK:enterprise:T1112

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--150f7dbe-3e64-4ee4-a621-6d416e53af63

Checkpoint MosesStaff Nov 2021

ATTACK:enterprise:S1033 → uses → ATTACK:enterprise:T1027.013

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--388b7632-476a-4194-be77-451ba13bcb10

Checkpoint MosesStaff Nov 2021

ATTACK:enterprise:G1009 → uses → ATTACK:enterprise:S1033

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4d106c44-26fd-438b-99c4-6c2ce1bb1084

Checkpoint MosesStaff Nov 2021

ATTACK:enterprise:S1033 → uses → ATTACK:enterprise:T1124

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5c6dfc28-fa7c-4941-a144-890a428f9951

Checkpoint MosesStaff Nov 2021

ATTACK:enterprise:S1033 → uses → ATTACK:enterprise:T1486

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--696c0ce2-7829-4d95-baab-ae64db59c62a

Checkpoint MosesStaff Nov 2021

ATTACK:enterprise:S1033 → uses → ATTACK:enterprise:T1106

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6b580198-d882-4875-b1d5-ad937b95f12f

Checkpoint MosesStaff Nov 2021

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.