DEADWOOD
Software · ATTACK:enterprise:S1134
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1134",
"title": "DEADWOOD",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1134",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--f2e6af17-3828-4f10-88e7-343591618ddb",
"external_id": "S1134",
"domain": "enterprise",
"created": "2024-05-22T21:27:28.050Z",
"modified": "2024-08-26T18:34:46.859Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "SentinelOne Agrius 2021",
"url": "https://assets.sentinelone.com/sentinellabs/evol-agrius"
}
]
}Explicit source assertions (12)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1134 → uses → ATTACK:enterprise:T1561.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--11f7aee6-3479-4756-8300-741e28e75142
SentinelOne Agrius 2021ATTACK:enterprise:S1134 → uses → ATTACK:enterprise:T1027.009
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3dc04b05-16d3-445a-98b6-e3f3f4a352ef
SentinelOne Agrius 2021ATTACK:enterprise:S1134 → uses → ATTACK:enterprise:T1485
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--479ec00e-ce63-4a2f-8489-e0df55238e88
SentinelOne Agrius 2021ATTACK:enterprise:G0064 → uses → ATTACK:enterprise:S1134
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--58baeaa3-4a41-4907-b695-53723529483b
RecordedFuture IranianResponse 2020ATTACK:enterprise:S1134 → uses → ATTACK:enterprise:T1036.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--60692cc5-ca97-4c1d-8011-8dbe111ca8f4
SentinelOne Agrius 2021ATTACK:enterprise:S1134 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--862e9ef0-a45f-4001-ad56-4432de517d80
SentinelOne Agrius 2021ATTACK:enterprise:G1030 → uses → ATTACK:enterprise:S1134
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9073e616-bd4a-4546-9374-d2a7dc96efb4
SentinelOne Agrius 2021ATTACK:enterprise:S1134 → uses → ATTACK:enterprise:T1569.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--927a3c20-7d5c-42ac-97c8-e3546a11c411
SentinelOne Agrius 2021ATTACK:enterprise:S1134 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a91a486b-4119-44e1-9fcf-c746849947e8
SentinelOne Agrius 2021ATTACK:enterprise:S1134 → uses → ATTACK:enterprise:T1124
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b59cba59-e191-4a12-aa82-1a74ec59df48
SentinelOne Agrius 2021ATTACK:enterprise:S1134 → uses → ATTACK:enterprise:T1531
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ca8e4853-3214-4073-86ea-ca6cd62c1eff
SentinelOne Agrius 2021ATTACK:enterprise:S1134 → uses → ATTACK:enterprise:T1561.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d9297dfb-9b0b-421d-a5f6-05619c778953
SentinelOne Agrius 2021