Patchfirst
T1588.001Resource Development

Malware

Adversaries may buy, steal, or download malware that can be used during targeting. Malicious software can include payloads, droppers, post-compromise tools, backdoors, packers, and C2 protocols. Adversaries may acquire malware to support their operations, obtaining a means for maintaining control of remote machines, evading defenses, and executing post-compromise behaviors. In addition to…

attack.mitre.org ↗
CVEs2
In 2
Reports0

Detections

1 Sigma rule tagged T1588.001
MalwareT1588.0011 general rule

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Malware

2 CVEs, by priority. Each link shows its badge.
  1. CVE-2023-34048VMware vCenter Server Out-of-Bounds Write Vulnerability
    VMware · vCenter ServerKEVPublic exploitCritical · 9.8T1588.001Malware1 report
    MITRE CTID mapping of the KEV entry · follow-on activity
    99.2%Top 0.06%
    73.7priority
  2. CVE-2025-04117-Zip Mark of the Web Bypass Vulnerability
    7-Zip · 7-ZipKEVPublic exploitHigh · 7.0T1588.001MalwareT1566.001Spearphishing Attachment+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    67.1%Top 0.7%
    67.8priority
↑ ↓ chooseEnter openEsc close