cti-ATT-CK-v13.1/ics-attack/malware/malware--4dcff507-5af8-47ce-964a-8d9569e9ccfe.json

{
    "type": "bundle",
    "id": "bundle--9683e341-d9dd-42ee-8e84-8a9db39ad4dd",
    "spec_version": "2.0",
    "objects": [
        {
            "modified": "2022-10-12T17:59:55.276Z",
            "name": "PLC-Blaster",
            "description": "[PLC-Blaster](https://attack.mitre.org/software/S1006) is a piece of proof-of-concept malware that runs on Siemens S7 PLCs. This worm locates other Siemens S7 PLCs on the network and attempts to infect them.  Once this worm has infected its target and attempted to infect other devices on the network, the worm can then run one of many modules. (Citation: Spenneberg, Ralf, Maik Brggemann, and Hendrik Schwartke March 2016) (Citation: Spenneberg, Ralf 2016) ",
            "x_mitre_deprecated": false,
            "x_mitre_domains": [
                "ics-attack"
            ],
            "x_mitre_version": "1.0",
            "x_mitre_aliases": [
                "PLC-Blaster"
            ],
            "type": "malware",
            "id": "malware--4dcff507-5af8-47ce-964a-8d9569e9ccfe",
            "created": "2019-03-26T15:02:14.907Z",
            "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "revoked": false,
            "external_references": [
                {
                    "source_name": "mitre-attack",
                    "url": "https://attack.mitre.org/software/S1006",
                    "external_id": "S1006"
                },
                {
                    "source_name": "Spenneberg, Ralf 2016",
                    "description": "Spenneberg, Ralf 2016 PLC-Blaster Retrieved. 2019/06/06 ",
                    "url": "https://www.blackhat.com/docs/asia-16/materials/asia-16-Spenneberg-PLC-Blaster-A-Worm-Living-Solely-In-The-PLC.pdf"
                },
                {
                    "source_name": "Spenneberg, Ralf, Maik Brggemann, and Hendrik Schwartke March 2016",
                    "description": "Spenneberg, Ralf, Maik Brggemann, and Hendrik Schwartke 2016, March 31 Plc-blaster: A worm living solely in the plc. Retrieved. 2017/09/19 ",
                    "url": "https://www.blackhat.com/docs/asia-16/materials/asia-16-Spenneberg-PLC-Blaster-A-Worm-Living-Solely-In-The-PLC-wp.pdf"
                }
            ],
            "object_marking_refs": [
                "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
            ],
            "labels": [
                "malware"
            ],
            "x_mitre_attack_spec_version": "2.1.0",
            "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5"
        }
    ]
}