T1193: T1193
Essential information
- MITRE technique ID
T1193- Confidence
- 100/100
- Revoked
- No
- Published
- 20/12/2025 19:32
- Modified
- 27/05/2026 15:52
- Author / Source
- AlienVault
Description
No description.
Marking (TLP)
TLP:GREEN
External references
Related entities
Intrusion sets, malware, reports, vulnerabilities, indicators and other entities linked to this technique.
Intrusion sets (APT) (26)
-
Hydrochasma relatedAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
The MITRE Corporation Confidence 100
[Sidewinder](https://attack.mitre.org/groups/G0121) is a suspected Indian threat actor group that has been active since at least 2012. They have been observed targeting government, military, and business entities throughout Asia,…
First seen 01/01/1970 · Last seen 16/11/5138 ·
Malware (78)
-
XWorm usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
AndeLoader usesFamily
-
FakeBat usesFamily
-
MuddyC2Go usesFamily
-
SPECTR usesFamily
-
procburner usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
CotSam uses
-
Cotx usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
-
VineThorn uses
-
SmokeLoader usesFamily
-
TacticalRMM usesFamily
-
Emotet usesFamily The MITRE Corporation Confidence 100
[Emotet](https://attack.mitre.org/software/S0367) is a modular malware variant which is primarily used as a downloader for other malware variants such as [TrickBot](https://attack.mitre.org/software/S0266) and [IcedID](https://attack.mitre.org/software/S0483). Emotet first emerged in June 2014,…
First seen 01/01/1970 · Last seen 16/11/5138 ·
Reports (26)
-
20 MITREs 4 Observables
-
10 MITREs 9 Observables 1 APT
-
10 MITREs 3 Malwares 4 Observables
-
2 CVEs 9 MITREs 2 Malwares 28 Observables
-
9 MITREs 2 Observables
-
6 MITREs 7 Observables
-
10 MITREs 2 Malwares 10 Observables
-
15 MITREs 2 Malwares 17 Observables
-
20 MITREs 2 Malwares 33 Observables 1 APT
-
19 MITREs 5 Malwares 13 Observables
-
12 MITREs 19 Observables
-
10 MITREs 3 Malwares 200 Observables 1 APT
Vulnerabilities (CVE) (5)
The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary memory, …
- Attack vector
- LOCAL
- Published
- 11/09/2019
- Modified
- 20/12/2025
Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code …
- Published
- 03/11/2021
- Modified
- 27/05/2026
Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user.
- Attack vector
- Local
- Complexity
- Low
- Published
- 15/11/2017
- Modified
- 29/05/2026
Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for …
- Attack vector
- LOCAL
- Complexity
- LOW
- Published
- 12/04/2017
- Modified
- 22/04/2026
Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution.
- Published
- 03/11/2021
- Modified
- 27/05/2026