Pulse Detail-

Regin - Further Investigations by Symantec Aug 2015

概要

Symantec’s continuing investigation into the Regin Trojan has cast new light on the cyberespionage tool, revealing a wider range of capabilities and a complex infrastructure supporting the threat.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Regin (score: 0.78)
Greenbug cyberespionage group targeting Middle East, possible links to Shamoon (score: 0.55)
Defending the White Elephant (score: 0.55)
Stegoloader: A Stealthy Information Stealer (score: 0.55)
New Targeted Attack Group Buys BIFROSE Code, Works in Teams (score: 0.55)

このPulseに関連する脅威アクター (事実ベース)

Kimsuky

Score: 27.50

Matched TTPs:

T1587.001 - Malware
T1007 - System Service Discovery
T1190 - Exploit Public-Facing Application
T1112 - Modify Registry
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1218.010 - Regsvr32
T1012 - Query Registry
T1518.001 - Security Software Discovery
T1219.002 - Remote Desktop Software
T1587 - Develop Capabilities
T1102.001 - Dead Drop Resolver

MITREへのリンク →

FIN13

Score: 4.41

Matched TTPs:

T1587.001 - Malware
T1190 - Exploit Public-Facing Application
T1588.002 - Tool

MITREへのリンク →

Moonstone Sleet

Score: 5.94

Matched TTPs:

T1587.001 - Malware
T1587 - Develop Capabilities

MITREへのリンク →

Indrik Spider

Score: 10.48

Matched TTPs:

T1587.001 - Malware
T1007 - System Service Discovery
T1112 - Modify Registry
T1562.001 - Disable or Modify Tools
T1012 - Query Registry

MITREへのリンク →

Lazarus Group

Score: 10.26

Matched TTPs:

T1587.001 - Malware
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1036.003 - Rename Legitimate Utilities
T1012 - Query Registry

MITREへのリンク →

Contagious Interview

Score: 15.65

Matched TTPs:

T1587.001 - Malware
T1681 - Search Threat Vendor Data
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1219.002 - Remote Desktop Software
T1587 - Develop Capabilities

MITREへのリンク →

OilRig

Score: 16.82

Matched TTPs:

T1587.001 - Malware
T1497.001 - System Checks
T1007 - System Service Discovery
T1195 - Supply Chain Compromise
T1112 - Modify Registry
T1588.002 - Tool
T1012 - Query Registry

MITREへのリンク →

UNC3886

Score: 9.50

Matched TTPs:

T1587.001 - Malware
T1190 - Exploit Public-Facing Application
T1681 - Search Threat Vendor Data
T1562.001 - Disable or Modify Tools

MITREへのリンク →

LuminousMoth

Score: 4.77

Matched TTPs:

T1587.001 - Malware
T1112 - Modify Registry
T1588.002 - Tool

MITREへのリンク →

Sandworm Team

Score: 15.17

Matched TTPs:

T1587.001 - Malware
T1195 - Supply Chain Compromise
T1190 - Exploit Public-Facing Application
T1584.005 - Botnet
T1588.002 - Tool
T1490 - Inhibit System Recovery

MITREへのリンク →

Salt Typhoon

Score: 8.95

Matched TTPs:

T1587.001 - Malware
T1190 - Exploit Public-Facing Application
T1602.002 - Network Device Configuration Dump
T1588.002 - Tool

MITREへのリンク →

APT29

Score: 4.41

Matched TTPs:

T1587.001 - Malware
T1190 - Exploit Public-Facing Application
T1588.002 - Tool

MITREへのリンク →

Play

Score: 8.11

Matched TTPs:

T1587.001 - Malware
T1190 - Exploit Public-Facing Application
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1518.001 - Security Software Discovery

MITREへのリンク →

Moses Staff

Score: 4.41

Matched TTPs:

T1587.001 - Malware
T1190 - Exploit Public-Facing Application
T1588.002 - Tool

MITREへのリンク →

Turla

Score: 13.23

Matched TTPs:

T1587.001 - Malware
T1007 - System Service Discovery
T1112 - Modify Registry
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1012 - Query Registry
T1518.001 - Security Software Discovery

MITREへのリンク →

Ke3chang

Score: 10.78

Matched TTPs:

T1587.001 - Malware
T1583.005 - Botnet
T1007 - System Service Discovery
T1190 - Exploit Public-Facing Application
T1588.002 - Tool

MITREへのリンク →

Mustang Panda

Score: 13.16

Matched TTPs:

T1587.001 - Malware
T1176.002 - IDE Extensions
T1588.002 - Tool
T1219.002 - Remote Desktop Software
T1518 - Software Discovery

MITREへのリンク →

TeamTNT

Score: 8.31

Matched TTPs:

T1587.001 - Malware
T1007 - System Service Discovery
T1562.001 - Disable or Modify Tools
T1518.001 - Security Software Discovery

MITREへのリンク →

FIN7

Score: 4.41

Matched TTPs:

T1587.001 - Malware
T1190 - Exploit Public-Facing Application
T1588.002 - Tool

MITREへのリンク →

Evilnum

Score: 6.37

Matched TTPs:

T1497.001 - System Checks
T1219.002 - Remote Desktop Software

MITREへのリンク →

Volt Typhoon

Score: 18.71

Matched TTPs:

T1497.001 - System Checks
T1007 - System Service Discovery
T1190 - Exploit Public-Facing Application
T1112 - Modify Registry
T1584.005 - Botnet
T1588.002 - Tool
T1012 - Query Registry
T1518 - Software Discovery

MITREへのリンク →

Darkhotel

Score: 5.34

Matched TTPs:

T1497.001 - System Checks
T1518.001 - Security Software Discovery

MITREへのリンク →

Gamaredon Group

Score: 12.05

Matched TTPs:

T1497.001 - System Checks
T1112 - Modify Registry
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1012 - Query Registry
T1518.001 - Security Software Discovery

MITREへのリンク →

HAFNIUM

Score: 8.94

Matched TTPs:

T1583.005 - Botnet
T1190 - Exploit Public-Facing Application
T1584.005 - Botnet

MITREへのリンク →

APT5

Score: 5.31

Matched TTPs:

T1583.005 - Botnet
T1190 - Exploit Public-Facing Application

MITREへのリンク →

BRONZE BUTLER

Score: 11.20

Matched TTPs:

T1007 - System Service Discovery
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1518 - Software Discovery
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Aquatic Panda

Score: 8.90

Matched TTPs:

T1007 - System Service Discovery
T1112 - Modify Registry
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1518.001 - Security Software Discovery

MITREへのリンク →

Chimera

Score: 5.61

Matched TTPs:

T1007 - System Service Discovery
T1588.002 - Tool
T1012 - Query Registry

MITREへのリンク →

Earth Lusca

Score: 6.67

Matched TTPs:

T1007 - System Service Discovery
T1190 - Exploit Public-Facing Application
T1112 - Modify Registry
T1588.002 - Tool

MITREへのリンク →

APT1

Score: 3.37

Matched TTPs:

T1007 - System Service Discovery
T1588.002 - Tool

MITREへのリンク →

Ember Bear

Score: 8.94

Matched TTPs:

T1195 - Supply Chain Compromise
T1190 - Exploit Public-Facing Application
T1112 - Modify Registry
T1562.001 - Disable or Modify Tools

MITREへのリンク →

Rocke

Score: 8.45

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1562.001 - Disable or Modify Tools
T1518.001 - Security Software Discovery
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Threat Group-3390

Score: 10.52

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1608.002 - Upload Tool
T1112 - Modify Registry
T1588.002 - Tool
T1012 - Query Registry

MITREへのリンク →

APT28

Score: 6.45

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1588.002 - Tool
T1211 - Exploitation for Defense Evasion

MITREへのリンク →

Magic Hound

Score: 5.95

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1112 - Modify Registry
T1588.002 - Tool
T1562.001 - Disable or Modify Tools

MITREへのリンク →

Medusa Group

Score: 15.26

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1608.002 - Upload Tool
T1112 - Modify Registry
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1518.001 - Security Software Discovery
T1490 - Inhibit System Recovery

MITREへのリンク →

Storm-0501

Score: 12.33

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1218.010 - Regsvr32
T1518.001 - Security Software Discovery
T1219.002 - Remote Desktop Software
T1490 - Inhibit System Recovery

MITREへのリンク →

Fox Kitten

Score: 3.71

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1012 - Query Registry

MITREへのリンク →

BlackByte

Score: 12.52

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1112 - Modify Registry
T1562.001 - Disable or Modify Tools
T1012 - Query Registry
T1518.001 - Security Software Discovery
T1490 - Inhibit System Recovery

MITREへのリンク →

Agrius

Score: 3.27

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1562.001 - Disable or Modify Tools

MITREへのリンク →

menuPass

Score: 5.60

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1588.002 - Tool
T1036.003 - Rename Legitimate Utilities

MITREへのリンク →

ToddyCat

Score: 3.37

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1518.001 - Security Software Discovery

MITREへのリンク →

Blue Mockingbird

Score: 6.90

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1112 - Modify Registry
T1588.002 - Tool
T1218.010 - Regsvr32

MITREへのリンク →

GALLIUM

Score: 5.60

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1588.002 - Tool
T1036.003 - Rename Legitimate Utilities

MITREへのリンク →

Leviathan

Score: 4.22

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1218.010 - Regsvr32

MITREへのリンク →

INC Ransom

Score: 4.12

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1588.002 - Tool
T1562.001 - Disable or Modify Tools

MITREへのリンク →

Dragonfly

Score: 6.38

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1112 - Modify Registry
T1588.002 - Tool
T1012 - Query Registry

MITREへのリンク →

Axiom

Score: 5.09

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1584.005 - Botnet

MITREへのリンク →

APT41

Score: 9.67

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1112 - Modify Registry
T1588.002 - Tool
T1012 - Query Registry
T1102.001 - Dead Drop Resolver

MITREへのリンク →

MuddyWater

Score: 8.76

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1518.001 - Security Software Discovery
T1518 - Software Discovery

MITREへのリンク →

APT39

Score: 4.55

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1588.002 - Tool
T1012 - Query Registry

MITREへのリンク →

Wizard Spider

Score: 14.20

Matched TTPs:

T1518.002 - Backup Software Discovery
T1112 - Modify Registry
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1518.001 - Security Software Discovery
T1490 - Inhibit System Recovery

MITREへのリンク →

APT38

Score: 9.66

Matched TTPs:

T1112 - Modify Registry
T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1036.003 - Rename Legitimate Utilities
T1518.001 - Security Software Discovery

MITREへのリンク →

Patchwork

Score: 7.86

Matched TTPs:

T1112 - Modify Registry
T1588.002 - Tool
T1518.001 - Security Software Discovery
T1102.001 - Dead Drop Resolver

MITREへのリンク →

TA505

Score: 4.48

Matched TTPs:

T1112 - Modify Registry
T1588.002 - Tool
T1562.001 - Disable or Modify Tools

MITREへのリンク →

APT19

Score: 5.43

Matched TTPs:

T1112 - Modify Registry
T1588.002 - Tool
T1218.010 - Regsvr32

MITREへのリンク →

Lotus Blossom

Score: 4.91

Matched TTPs:

T1112 - Modify Registry
T1588.002 - Tool
T1012 - Query Registry

MITREへのリンク →

APT32

Score: 10.95

Matched TTPs:

T1112 - Modify Registry
T1588.002 - Tool
T1218.010 - Regsvr32
T1036.003 - Rename Legitimate Utilities
T1012 - Query Registry

MITREへのリンク →

Gorgon Group

Score: 4.48

Matched TTPs:

T1112 - Modify Registry
T1588.002 - Tool
T1562.001 - Disable or Modify Tools

MITREへのリンク →

APT42

Score: 4.58

Matched TTPs:

T1112 - Modify Registry
T1588.002 - Tool
T1518.001 - Security Software Discovery

MITREへのリンク →

Saint Bear

Score: 3.63

Matched TTPs:

T1112 - Modify Registry
T1562.001 - Disable or Modify Tools

MITREへのリンク →

FIN8

Score: 4.58

Matched TTPs:

T1112 - Modify Registry
T1588.002 - Tool
T1518.001 - Security Software Discovery

MITREへのリンク →

Equation

Score: 4.54

Matched TTPs:

T1542.002 - Component Firmware

MITREへのリンク →

Inception

Score: 6.34

Matched TTPs:

T1588.002 - Tool
T1218.010 - Regsvr32
T1518 - Software Discovery

MITREへのリンク →

Storm-1811

Score: 3.78

Matched TTPs:

T1588.002 - Tool
T1219.002 - Remote Desktop Software

MITREへのリンク →

Scattered Spider

Score: 8.86

Matched TTPs:

T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1219.002 - Remote Desktop Software
T1490 - Inhibit System Recovery

MITREへのリンク →

TA2541

Score: 4.55

Matched TTPs:

T1588.002 - Tool
T1562.001 - Disable or Modify Tools
T1518.001 - Security Software Discovery

MITREへのリンク →

WIRTE

Score: 3.60

Matched TTPs:

T1588.002 - Tool
T1218.010 - Regsvr32

MITREへのリンク →

Cobalt Group

Score: 5.49

Matched TTPs:

T1588.002 - Tool
T1218.010 - Regsvr32
T1518.001 - Security Software Discovery

MITREへのリンク →

Thrip

Score: 3.78

Matched TTPs:

T1588.002 - Tool
T1219.002 - Remote Desktop Software

MITREへのリンク →

HEXANE

Score: 3.60

Matched TTPs:

T1588.002 - Tool
T1518 - Software Discovery

MITREへのリンク →

Velvet Ant

Score: 5.93

Matched TTPs:

T1562.001 - Disable or Modify Tools
T1211 - Exploitation for Defense Evasion

MITREへのリンク →

Daggerfly

Score: 5.52

Matched TTPs:

T1036.003 - Rename Legitimate Utilities
T1012 - Query Registry

MITREへのリンク →

Sidewinder

Score: 4.65

Matched TTPs:

T1518.001 - Security Software Discovery
T1518 - Software Discovery

MITREへのリンク →

SideCopy

Score: 4.65

Matched TTPs:

T1518.001 - Security Software Discovery
T1518 - Software Discovery

MITREへのリンク →

Windshift

Score: 4.65

Matched TTPs:

T1518.001 - Security Software Discovery
T1518 - Software Discovery

MITREへのリンク →

Tropic Trooper

Score: 4.65

Matched TTPs:

T1518.001 - Security Software Discovery
T1518 - Software Discovery

MITREへのリンク →

RTM

Score: 6.21

Matched TTPs:

T1219.002 - Remote Desktop Software
T1102.001 - Dead Drop Resolver

MITREへのリンク →

PLATINUM

Score: 4.54

Matched TTPs:

T1056.004 - Credential API Hooking

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.80

Matched TTPs:

T1588.002 - Tool
T1190 - Exploit Public-Facing Application
T1562.001 - Disable or Modify Tools
T1518.001 - Security Software Discovery
T1219.002 - Remote Desktop Software
T1102.001 - Dead Drop Resolver
T1587 - Develop Capabilities
T1587.001 - Malware
T1012 - Query Registry
T1218.010 - Regsvr32
T1007 - System Service Discovery
T1112 - Modify Registry

MITREへのリンク →

Volt Typhoon

Score: 0.56

Matched TTPs:

T1588.002 - Tool
T1497.001 - System Checks
T1190 - Exploit Public-Facing Application
T1584.005 - Botnet
T1012 - Query Registry
T1518 - Software Discovery
T1007 - System Service Discovery
T1112 - Modify Registry

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る

Regin - Further Investigations by Symantec Aug 2015

概要

Indicators

類似Pulses

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

Pulse – 脅威アクターグラフ