| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Wipbot (36c0faf0-428e-4e7f-93c5-824bb0495ac9) | Tool | 1 | 
| Wipbot (6b6cf608-cc2c-40d7-8500-afca3e35e7e4) | Malpedia | Wipbot (36c0faf0-428e-4e7f-93c5-824bb0495ac9) | Tool | 1 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | System Owner/User Discovery - T1033 (03d7999c-1f4c-42cc-8373-e7690d318104) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | System Information Discovery - T1082 (354a7f88-63fb-41b5-a801-ce3b377b36f1) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a) | Attack Pattern | 2 | 
| Code Signing - T1553.002 (32901740-b42c-4fdd-bc02-345b5dc57082) | Attack Pattern | Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | File and Directory Discovery - T1083 (7bc57495-ea59-4380-be31-a64af124ef18) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Security Software Discovery - T1518.001 (cba37adb-d6fb-4610-b069-dd04c0643384) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Archive Collected Data - T1560 (53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Wipbot (6b6cf608-cc2c-40d7-8500-afca3e35e7e4) | Malpedia | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Archive via Library - T1560.002 (41868330-6ee2-4d0f-b743-9f2294c3c9b6) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | System Network Connections Discovery - T1049 (7e150503-88e7-4861-866b-ff1ac82c4475) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | System Service Discovery - T1007 (322bad5a-1c49-4d23-ab79-76d641794afa) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Query Registry - T1012 (c32f7008-9fea-41f7-8366-5eb9b74bd896) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | File Deletion - T1070.004 (d63a3fb8-9452-4e9d-a60a-54be68d5998c) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Process Discovery - T1057 (8f4a33ec-8b1f-4b80-a2f6-642b2e479580) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Web Protocols - T1071.001 (df8b2a25-8bdf-4856-953c-a04372b1c161) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Symmetric Cryptography - T1573.001 (24bfaeba-cb0d-4525-b3dc-507c77ecec41) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Remote System Discovery - T1018 (e358d692-23c0-4a31-9eb6-ecc13a8d7735) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Extra Window Memory Injection - T1055.011 (0042a9f5-f053-4769-b3ef-9ad018dfa298) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | System Network Configuration Discovery - T1016 (707399d6-ab3e-4963-9315-d9d3818cd6a0) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | System Time Discovery - T1124 (f3c544dc-673c-4ef3-accb-53229f1ae077) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Local Groups - T1069.001 (a01bf75f-00b2-4568-a58f-565ff9bf202b) | Attack Pattern | 2 | 
| Epic - S0091 (6b62e336-176f-417b-856a-8552dd8c44e1) | Malware | Local Account - T1087.001 (25659dd6-ea12-45c4-97e6-381e3e4b593e) | Attack Pattern | 2 | 
| Code Signing - T1553.002 (32901740-b42c-4fdd-bc02-345b5dc57082) | Attack Pattern | Subvert Trust Controls - T1553 (b83e166d-13d7-4b52-8677-dff90c548fd7) | Attack Pattern | 3 | 
| Software Discovery - T1518 (e3b6daca-e963-4a69-aee6-ed4fd653ad58) | Attack Pattern | Security Software Discovery - T1518.001 (cba37adb-d6fb-4610-b069-dd04c0643384) | Attack Pattern | 3 | 
| Archive Collected Data - T1560 (53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a) | Attack Pattern | Archive via Library - T1560.002 (41868330-6ee2-4d0f-b743-9f2294c3c9b6) | Attack Pattern | 3 | 
| Indicator Removal - T1070 (799ace7f-e227-4411-baa0-8868704f2a69) | Attack Pattern | File Deletion - T1070.004 (d63a3fb8-9452-4e9d-a60a-54be68d5998c) | Attack Pattern | 3 | 
| Web Protocols - T1071.001 (df8b2a25-8bdf-4856-953c-a04372b1c161) | Attack Pattern | Application Layer Protocol - T1071 (355be19c-ffc9-46d5-8d50-d6a036c675b6) | Attack Pattern | 3 | 
| Encrypted Channel - T1573 (b8902400-e6c5-4ba2-95aa-2d35b442b118) | Attack Pattern | Symmetric Cryptography - T1573.001 (24bfaeba-cb0d-4525-b3dc-507c77ecec41) | Attack Pattern | 3 | 
| Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) | Attack Pattern | Extra Window Memory Injection - T1055.011 (0042a9f5-f053-4769-b3ef-9ad018dfa298) | Attack Pattern | 3 | 
| Permission Groups Discovery - T1069 (15dbf668-795c-41e6-8219-f0447c0e64ce) | Attack Pattern | Local Groups - T1069.001 (a01bf75f-00b2-4568-a58f-565ff9bf202b) | Attack Pattern | 3 | 
| Local Account - T1087.001 (25659dd6-ea12-45c4-97e6-381e3e4b593e) | Attack Pattern | Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08) | Attack Pattern | 3 |