Snip3
Software · ATTACK:enterprise:S1086
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1086",
"title": "Snip3",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1086",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--4327aff5-f194-440c-b499-4d9730cc1eab",
"external_id": "S1086",
"domain": "enterprise",
"created": "2023-09-13T18:52:15.552Z",
"modified": "2023-10-10T17:18:52.857Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Telefonica Snip3 December 2021",
"url": "https://telefonicatech.com/blog/snip3-investigacion-malware"
},
{
"source_name": "Morphisec Snip3 May 2021",
"url": "https://blog.morphisec.com/revealing-the-snip3-crypter-a-highly-evasive-rat-loader"
}
]
}Explicit source assertions (21)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--03e6a535-5c95-47e7-a369-aed653022c7c
Morphisec Snip3 May 2021ATTACK:enterprise:G1018 → uses → ATTACK:enterprise:S1086
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--044e6bdf-a7d1-4f70-8591-193ad4fab387
Proofpoint TA2541 February 2022 · Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1102
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1b40e3b0-a862-4c79-a8e6-a008e71f6028
Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1059.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--20740afb-283e-4143-ab47-685d4c73beda
Telefonica Snip3 December 2021 · Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1055.012
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--372642cf-1598-46a0-a791-2f6d2d2d8987
Telefonica Snip3 December 2021 · Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3979ca39-09a1-4a2b-a7d3-2eca5f1fb166
Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4d28e653-c023-45cf-bbbd-ade005bcd519
Telefonica Snip3 December 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--69d1d811-fb2f-43cc-99bb-989769dd4ffb
Telefonica Snip3 December 2021 · Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6deb7ae9-9e35-47cb-8db2-e708ad9543b6
Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1204.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6ebe95eb-909e-460e-b2ff-db0838e2f1e8
Telefonica Snip3 December 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1566.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7d1c227c-25b9-4e8b-ad88-618d9f382420
Telefonica Snip3 December 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1497.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7f152b13-3aae-4c67-b8f3-391cac671aed
Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1047
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8a61202f-ec67-4ec2-8640-c148147731e0
Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1104
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8f060861-0206-4dcc-9f46-c55bde63ae40
Telefonica Snip3 December 2021 · Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--992be3b6-caea-497f-ae2b-256197433cc8
Telefonica Snip3 December 2021 · Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1566.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b1ed7715-2145-4b26-b414-8f83a29e1f74
Telefonica Snip3 December 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1189
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c7b780c4-7a9a-4eb2-9132-6c80a8671a94
Telefonica Snip3 December 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1497.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cbed7d53-5d5f-48ee-a2d0-ee10230d4e4c
Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1564.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e8ab5495-dbc7-470a-b3e7-cbbfbf29094e
Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1027.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f54d4ca7-940d-4cf2-b02d-df9b5bfb643e
Morphisec Snip3 May 2021ATTACK:enterprise:S1086 → uses → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f5fcb813-4522-4846-8176-b630847269d9
Telefonica Snip3 December 2021 · Morphisec Snip3 May 2021