OilBooster
Software · ATTACK:enterprise:S1172
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S1172",
"title": "OilBooster",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1172",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--b0381480-d5ba-4dd8-a39e-fb8f1afea3a0",
"external_id": "S1172",
"domain": "enterprise",
"created": "2024-11-26T21:02:40.104Z",
"modified": "2024-11-27T19:43:37.942Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "ESET OilRig Downloaders DEC 2023",
"url": "https://www.welivesecurity.com/en/eset-research/oilrig-persistent-attacks-cloud-service-powered-downloaders/"
}
]
}Explicit source assertions (16)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0116fbf2-4402-41af-bc5b-216e0e27c2db
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2c351c25-fc11-4168-9ad5-6a5aab84634c
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1567.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--62a42fd5-ee4e-4a81-96a4-8f5396349ef9
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1564.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--62a9e155-9ecd-4781-8914-1c0e5183b98f
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6d299687-0537-48cb-8592-6fbab1e0b0fa
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1102.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--71c7cb53-415c-4ce5-9914-40227071b175
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1559
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8f2f514a-81be-4f14-be6f-d442814b9bd6
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9dbe8924-bf0a-4b76-98ff-04f6f442ae8b
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c3a32cc6-85bd-41e8-b1c5-aa474352faaf
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:G0049 → uses → ATTACK:enterprise:S1172
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cdf368a4-7fc5-4bb6-8f5c-82744ee96821
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d5f4de59-e743-4330-98a5-7240b8103f44
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1074.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--db4032d6-1283-4e1e-a506-110a8600083f
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e425fe3b-b6a3-4a90-b11c-8b2fbc122f72
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1573.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f372fb75-82cb-4239-b5a9-2bf222a8268e
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f59927fc-7a14-44bf-9164-47ac08cf86a4
ESET OilRig Downloaders DEC 2023ATTACK:enterprise:S1172 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fd492de4-85fc-42a3-a499-d49d55c3b252
ESET OilRig Downloaders DEC 2023