aol.pm

TAMECAT

Software · ATTACK:enterprise:S1193

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S1193",
  "title": "TAMECAT",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1193",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--12fdf05a-4bd1-4f45-9cde-d3af35f82db1",
  "external_id": "S1193",
  "domain": "enterprise",
  "created": "2025-01-08T22:21:32.556Z",
  "modified": "2025-01-08T22:21:48.530Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Mandiant APT42-untangling",
      "url": "https://cloud.google.com/blog/topics/threat-intelligence/untangling-iran-apt42-operations"
    }
  ]
}

Explicit source assertions (10)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S1193 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1ddb44cc-25c0-4f18-a70c-5c13c7d1c99a

Mandiant APT42-untangling

ATTACK:enterprise:S1193 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2a587f38-6625-4949-ae69-ed456f088d8b

Mandiant APT42-untangling

ATTACK:enterprise:S1193 → uses → ATTACK:enterprise:T1059.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--40705d29-f7f1-4a9d-b66b-e03f8ab16471

Mandiant APT42-untangling

ATTACK:enterprise:S1193 → uses → ATTACK:enterprise:T1132.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--476e4837-d820-44c5-9217-30d6dc821652

Mandiant APT42-untangling

ATTACK:enterprise:S1193 → uses → ATTACK:enterprise:T1047

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--55427322-8d66-40f7-92ce-ea489f58870c

Mandiant APT42-untangling

ATTACK:enterprise:S1193 → uses → ATTACK:enterprise:T1573.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--56160c7f-03d1-48e7-ad66-f959b13115bb

Mandiant APT42-untangling

ATTACK:enterprise:G1044 → uses → ATTACK:enterprise:S1193

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6507afbb-d576-4392-b5c0-afcb4dd73e3d

Mandiant APT42-untangling

ATTACK:enterprise:S1193 → uses → ATTACK:enterprise:T1518.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d051bbf1-be2f-45e6-adb2-5ae36ed4354f

Mandiant APT42-untangling

ATTACK:enterprise:S1193 → uses → ATTACK:enterprise:T1059.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e68bec53-4592-4d15-a573-086e10cbef12

Mandiant APT42-untangling

ATTACK:enterprise:S1193 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f769348f-3517-4562-8ce9-4dd56cb3699d

Mandiant APT42-untangling

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.