test_scratch / cti-ATT-CK-v13.1 /enterprise-attack /malware /malware--05318127-5962-444b-b900-a9dcfe0ff6e9.json
khoicrtp's picture
Upload 2298 files
5fe70fd
raw
history blame
2.4 kB
{
"type": "bundle",
"id": "bundle--18d46685-76b1-4413-95e9-0f25582a44a1",
"spec_version": "2.0",
"objects": [
{
"modified": "2022-10-14T21:33:47.608Z",
"name": "Amadey",
"description": "[Amadey](https://attack.mitre.org/software/S1025) is a Trojan bot that has been used since at least October 2018.(Citation: Korean FSI TA505 2020)(Citation: BlackBerry Amadey 2020)",
"x_mitre_platforms": [
"Windows"
],
"x_mitre_deprecated": false,
"x_mitre_domains": [
"enterprise-attack"
],
"x_mitre_version": "1.0",
"x_mitre_aliases": [
"Amadey"
],
"type": "malware",
"id": "malware--05318127-5962-444b-b900-a9dcfe0ff6e9",
"created": "2022-07-14T17:30:54.927Z",
"created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
"revoked": false,
"external_references": [
{
"source_name": "mitre-attack",
"url": "https://attack.mitre.org/software/S1025",
"external_id": "S1025"
},
{
"source_name": "Korean FSI TA505 2020",
"description": "Financial Security Institute. (2020, February 28). Profiling of TA505 Threat Group That Continues to Attack the Financial Sector. Retrieved July 14, 2022.",
"url": "https://www.fsec.or.kr/user/bbs/fsec/163/344/bbsDataView/1382.do?page=1&column=&search=&searchSDate=&searchEDate=&bbsDataCategory="
},
{
"source_name": "BlackBerry Amadey 2020",
"description": "Kasuya, M. (2020, January 8). Threat Spotlight: Amadey Bot Targets Non-Russian Users. Retrieved July 14, 2022.",
"url": "https://blogs.blackberry.com/en/2020/01/threat-spotlight-amadey-bot"
}
],
"object_marking_refs": [
"marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
],
"labels": [
"malware"
],
"x_mitre_attack_spec_version": "2.1.0",
"x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5"
}
]
}