Pulse Detail-

MTA 2016-01-25 - EITEST ANGLER EK FROM 86.106.93.21

概要

IOCs from http://www.malware-traffic-analysis.net/2016/01/25/index.html

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

MTA 2016-01-19: EITEST ANGLER EK FROM 89.45.67.196 (score: 0.99)
MTA 2015-12-29: ANGLER EK FROM 185.86.77.52 SENDS BEDEP (score: 0.95)
MTA 2016-02-07: RIG EK FROM 188.227.16.59 (score: 0.90)
MTA 2016-01-17: ANGLER EK FROM 31.148.99.125 CRYPTOWALL (score: 0.89)
MTA 2016-01-29: COMP WEBSITE GENERATES BOTH ANGLER EK AND RIG EK (score: 0.87)

このPulseに関連する脅威アクター (事実ベース)

Mustang Panda

Score: 20.74

Matched TTPs:

T1037 - Boot or Logon Initialization Scripts
T1606.002 - SAML Tokens
T1091 - Replication Through Removable Media
T1590.006 - Network Security Appliances
T1169 - Sudo
T1218.010 - Regsvr32
T1556.005 - Reversible Encryption
T1055.005 - Thread Local Storage

MITREへのリンク →

Kimsuky

Score: 17.53

Matched TTPs:

T1037 - Boot or Logon Initialization Scripts
T1606.002 - SAML Tokens
T1583.005 - Botnet
T1091 - Replication Through Removable Media
T1140 - Deobfuscate/Decode Files or Information
T1684 - Social Engineering
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption

MITREへのリンク →

Sea Turtle

Score: 8.00

Matched TTPs:

T1037 - Boot or Logon Initialization Scripts
T1140 - Deobfuscate/Decode Files or Information
T1218.010 - Regsvr32
T1556.005 - Reversible Encryption

MITREへのリンク →

Magic Hound

Score: 8.64

Matched TTPs:

T1099 - Timestomp
T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances
T1059.012 - Hypervisor CLI
T1556.005 - Reversible Encryption

MITREへのリンク →

HEXANE

Score: 6.19

Matched TTPs:

T1099 - Timestomp
T1091 - Replication Through Removable Media
T1590.006 - Network Security Appliances

MITREへのリンク →

APT29

Score: 16.88

Matched TTPs:

T1099 - Timestomp
T1606.002 - SAML Tokens
T1140 - Deobfuscate/Decode Files or Information
T1218.010 - Regsvr32
T1218.009 - Regsvcs/Regasm
T1223 - Compiled HTML File

MITREへのリンク →

Gamaredon Group

Score: 8.37

Matched TTPs:

T1099 - Timestomp
T1091 - Replication Through Removable Media
T1684 - Social Engineering
T1556.005 - Reversible Encryption

MITREへのリンク →

TA2541

Score: 7.18

Matched TTPs:

T1099 - Timestomp
T1091 - Replication Through Removable Media
T1684 - Social Engineering

MITREへのリンク →

Lotus Blossom

Score: 7.14

Matched TTPs:

T1099 - Timestomp
T1590.006 - Network Security Appliances
T1569.002 - Service Execution

MITREへのリンク →

FIN13

Score: 11.90

Matched TTPs:

T1099 - Timestomp
T1606.002 - SAML Tokens
T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption
T1569.002 - Service Execution

MITREへのリンク →

HAFNIUM

Score: 10.72

Matched TTPs:

T1099 - Timestomp
T1027.008 - Stripped Payloads
T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption

MITREへのリンク →

Turla

Score: 14.65

Matched TTPs:

T1099 - Timestomp
T1606.002 - SAML Tokens
T1684 - Social Engineering
T1590.006 - Network Security Appliances
T1059.012 - Hypervisor CLI
T1556.005 - Reversible Encryption
T1569.002 - Service Execution

MITREへのリンク →

Volt Typhoon

Score: 8.61

Matched TTPs:

T1099 - Timestomp
T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances
T1569.002 - Service Execution

MITREへのリンク →

FIN8

Score: 3.93

Matched TTPs:

T1099 - Timestomp
T1556.005 - Reversible Encryption

MITREへのリンク →

Moonstone Sleet

Score: 6.73

Matched TTPs:

T1606.002 - SAML Tokens
T1091 - Replication Through Removable Media
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption

MITREへのリンク →

Lazarus Group

Score: 15.07

Matched TTPs:

T1606.002 - SAML Tokens
T1590.006 - Network Security Appliances
T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI
T1556.005 - Reversible Encryption
T1055.005 - Thread Local Storage
T1569.002 - Service Execution

MITREへのリンク →

Contagious Interview

Score: 4.07

Matched TTPs:

T1606.002 - SAML Tokens
T1091 - Replication Through Removable Media

MITREへのリンク →

OilRig

Score: 8.22

Matched TTPs:

T1606.002 - SAML Tokens
T1091 - Replication Through Removable Media
T1590.006 - Network Security Appliances
T1218.010 - Regsvr32
T1556.005 - Reversible Encryption

MITREへのリンク →

UNC3886

Score: 8.09

Matched TTPs:

T1606.002 - SAML Tokens
T1583.005 - Botnet
T1140 - Deobfuscate/Decode Files or Information
T1218.010 - Regsvr32

MITREへのリンク →

LuminousMoth

Score: 5.26

Matched TTPs:

T1606.002 - SAML Tokens
T1091 - Replication Through Removable Media
T1556.005 - Reversible Encryption

MITREへのリンク →

Sandworm Team

Score: 15.79

Matched TTPs:

T1606.002 - SAML Tokens
T1583.005 - Botnet
T1091 - Replication Through Removable Media
T1140 - Deobfuscate/Decode Files or Information
T1218.010 - Regsvr32
T1075 - Pass the Hash
T1556.005 - Reversible Encryption

MITREへのリンク →

Salt Typhoon

Score: 6.60

Matched TTPs:

T1606.002 - SAML Tokens
T1583.005 - Botnet
T1140 - Deobfuscate/Decode Files or Information

MITREへのリンク →

Play

Score: 5.04

Matched TTPs:

T1606.002 - SAML Tokens
T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances

MITREへのリンク →

Aoqin Dragon

Score: 3.59

Matched TTPs:

T1606.002 - SAML Tokens
T1218.010 - Regsvr32

MITREへのリンク →

RedCurl

Score: 3.28

Matched TTPs:

T1606.002 - SAML Tokens
T1556.005 - Reversible Encryption

MITREへのリンク →

Moses Staff

Score: 5.04

Matched TTPs:

T1606.002 - SAML Tokens
T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances

MITREへのリンク →

Ke3chang

Score: 10.07

Matched TTPs:

T1606.002 - SAML Tokens
T1027.008 - Stripped Payloads
T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption

MITREへのリンク →

TeamTNT

Score: 10.86

Matched TTPs:

T1606.002 - SAML Tokens
T1091 - Replication Through Removable Media
T1590.006 - Network Security Appliances
T1519 - Emond
T1556.005 - Reversible Encryption

MITREへのリンク →

FIN7

Score: 5.54

Matched TTPs:

T1606.002 - SAML Tokens
T1091 - Replication Through Removable Media
T1140 - Deobfuscate/Decode Files or Information

MITREへのリンク →

APT5

Score: 7.77

Matched TTPs:

T1027.008 - Stripped Payloads
T1140 - Deobfuscate/Decode Files or Information
T1684 - Social Engineering

MITREへのリンク →

Velvet Ant

Score: 8.42

Matched TTPs:

T1583.005 - Botnet
T1684 - Social Engineering
T1569.002 - Service Execution

MITREへのリンク →

APT33

Score: 5.72

Matched TTPs:

T1583.005 - Botnet
T1218.010 - Regsvr32
T1556.005 - Reversible Encryption

MITREへのリンク →

DarkVishnya

Score: 3.03

Matched TTPs:

T1583.005 - Botnet

MITREへのリンク →

APT28

Score: 18.03

Matched TTPs:

T1583.005 - Botnet
T1140 - Deobfuscate/Decode Files or Information
T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI
T1146 - Clear Command History
T1556.005 - Reversible Encryption
T1588.003 - Code Signing Certificates

MITREへのリンク →

Earth Lusca

Score: 6.68

Matched TTPs:

T1091 - Replication Through Removable Media
T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances
T1059.012 - Hypervisor CLI

MITREへのリンク →

Mustard Tempest

Score: 3.74

Matched TTPs:

T1091 - Replication Through Removable Media
T1059.012 - Hypervisor CLI

MITREへのリンク →

Threat Group-3390

Score: 9.36

Matched TTPs:

T1091 - Replication Through Removable Media
T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances
T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI
T1556.005 - Reversible Encryption

MITREへのリンク →

SideCopy

Score: 3.44

Matched TTPs:

T1091 - Replication Through Removable Media
T1590.006 - Network Security Appliances

MITREへのリンク →

TA505

Score: 3.16

Matched TTPs:

T1091 - Replication Through Removable Media
T1556.005 - Reversible Encryption

MITREへのリンク →

BlackByte

Score: 8.56

Matched TTPs:

T1091 - Replication Through Removable Media
T1140 - Deobfuscate/Decode Files or Information
T1684 - Social Engineering
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption

MITREへのリンク →

BITTER

Score: 4.65

Matched TTPs:

T1091 - Replication Through Removable Media
T1218.010 - Regsvr32
T1556.005 - Reversible Encryption

MITREへのリンク →

APT32

Score: 10.35

Matched TTPs:

T1091 - Replication Through Removable Media
T1684 - Social Engineering
T1590.006 - Network Security Appliances
T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI
T1556.005 - Reversible Encryption

MITREへのリンク →

Saint Bear

Score: 3.47

Matched TTPs:

T1091 - Replication Through Removable Media
T1218.010 - Regsvr32

MITREへのリンク →

EXOTIC LILY

Score: 3.47

Matched TTPs:

T1091 - Replication Through Removable Media
T1218.010 - Regsvr32

MITREへのリンク →

APT42

Score: 4.63

Matched TTPs:

T1091 - Replication Through Removable Media
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption

MITREへのリンク →

Ember Bear

Score: 7.10

Matched TTPs:

T1140 - Deobfuscate/Decode Files or Information
T1218.010 - Regsvr32
T1519 - Emond

MITREへのリンク →

Medusa Group

Score: 4.13

Matched TTPs:

T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption

MITREへのリンク →

Winter Vivern

Score: 4.42

Matched TTPs:

T1140 - Deobfuscate/Decode Files or Information
T1059.012 - Hypervisor CLI
T1556.005 - Reversible Encryption

MITREへのリンク →

Leviathan

Score: 4.73

Matched TTPs:

T1140 - Deobfuscate/Decode Files or Information
T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI

MITREへのリンク →

Dragonfly

Score: 6.20

Matched TTPs:

T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances
T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI

MITREへのリンク →

Axiom

Score: 4.73

Matched TTPs:

T1140 - Deobfuscate/Decode Files or Information
T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI

MITREへのリンク →

APT41

Score: 8.08

Matched TTPs:

T1140 - Deobfuscate/Decode Files or Information
T1684 - Social Engineering
T1590.006 - Network Security Appliances
T1218.010 - Regsvr32
T1556.005 - Reversible Encryption

MITREへのリンク →

MuddyWater

Score: 5.62

Matched TTPs:

T1140 - Deobfuscate/Decode Files or Information
T1590.006 - Network Security Appliances
T1218.010 - Regsvr32
T1556.005 - Reversible Encryption

MITREへのリンク →

APT39

Score: 5.59

Matched TTPs:

T1140 - Deobfuscate/Decode Files or Information
T1556.005 - Reversible Encryption
T1569.002 - Service Execution

MITREへのリンク →

APT38

Score: 5.41

Matched TTPs:

T1684 - Social Engineering
T1059.012 - Hypervisor CLI
T1556.005 - Reversible Encryption

MITREへのリンク →

Wizard Spider

Score: 5.12

Matched TTPs:

T1684 - Social Engineering
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption

MITREへのリンク →

Cobalt Group

Score: 5.14

Matched TTPs:

T1684 - Social Engineering
T1218.010 - Regsvr32
T1556.005 - Reversible Encryption

MITREへのリンク →

APT37

Score: 6.91

Matched TTPs:

T1684 - Social Engineering
T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI
T1556.005 - Reversible Encryption

MITREへのリンク →

PLATINUM

Score: 4.22

Matched TTPs:

T1684 - Social Engineering
T1059.012 - Hypervisor CLI

MITREへのリンク →

APT19

Score: 4.42

Matched TTPs:

T1590.006 - Network Security Appliances
T1059.012 - Hypervisor CLI
T1556.005 - Reversible Encryption

MITREへのリンク →

Tropic Trooper

Score: 4.15

Matched TTPs:

T1590.006 - Network Security Appliances
T1218.010 - Regsvr32
T1556.005 - Reversible Encryption

MITREへのリンク →

Sidewinder

Score: 4.15

Matched TTPs:

T1590.006 - Network Security Appliances
T1218.010 - Regsvr32
T1556.005 - Reversible Encryption

MITREへのリンク →

Darkhotel

Score: 4.73

Matched TTPs:

T1590.006 - Network Security Appliances
T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI

MITREへのリンク →

Higaisa

Score: 7.08

Matched TTPs:

T1590.006 - Network Security Appliances
T1218.010 - Regsvr32
T1556.005 - Reversible Encryption
T1569.002 - Service Execution

MITREへのリンク →

Andariel

Score: 3.26

Matched TTPs:

T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI

MITREへのリンク →

Patchwork

Score: 3.26

Matched TTPs:

T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI

MITREへのリンク →

BRONZE BUTLER

Score: 4.45

Matched TTPs:

T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI
T1556.005 - Reversible Encryption

MITREへのリンク →

Transparent Tribe

Score: 3.26

Matched TTPs:

T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI

MITREへのリンク →

Elderwood

Score: 3.26

Matched TTPs:

T1218.010 - Regsvr32
T1059.012 - Hypervisor CLI

MITREへのリンク →

Equation

Score: 4.13

Matched TTPs:

T1130 - Install Root Certificate

MITREへのリンク →

Strider

Score: 7.06

Matched TTPs:

T1130 - Install Root Certificate
T1569.002 - Service Execution

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Mustang Panda

Score: 0.80

Matched TTPs:

T1169 - Sudo
T1606.002 - SAML Tokens
T1055.005 - Thread Local Storage
T1218.010 - Regsvr32
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption
T1037 - Boot or Logon Initialization Scripts
T1091 - Replication Through Removable Media

MITREへのリンク →

APT28

Score: 0.72

Matched TTPs:

T1218.010 - Regsvr32
T1583.005 - Botnet
T1556.005 - Reversible Encryption
T1146 - Clear Command History
T1140 - Deobfuscate/Decode Files or Information
T1059.012 - Hypervisor CLI
T1588.003 - Code Signing Certificates

MITREへのリンク →

Kimsuky

Score: 0.67

Matched TTPs:

T1606.002 - SAML Tokens
T1583.005 - Botnet
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption
T1037 - Boot or Logon Initialization Scripts
T1140 - Deobfuscate/Decode Files or Information
T1684 - Social Engineering
T1091 - Replication Through Removable Media

MITREへのリンク →

APT29

Score: 0.66

Matched TTPs:

T1606.002 - SAML Tokens
T1218.010 - Regsvr32
T1099 - Timestomp
T1223 - Compiled HTML File
T1140 - Deobfuscate/Decode Files or Information
T1218.009 - Regsvcs/Regasm

MITREへのリンク →

Sandworm Team

Score: 0.66

Matched TTPs:

T1606.002 - SAML Tokens
T1218.010 - Regsvr32
T1583.005 - Botnet
T1556.005 - Reversible Encryption
T1140 - Deobfuscate/Decode Files or Information
T1075 - Pass the Hash
T1091 - Replication Through Removable Media

MITREへのリンク →

Turla

Score: 0.62

Matched TTPs:

T1606.002 - SAML Tokens
T1569.002 - Service Execution
T1099 - Timestomp
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption
T1684 - Social Engineering
T1059.012 - Hypervisor CLI

MITREへのリンク →

Lazarus Group

Score: 0.61

Matched TTPs:

T1606.002 - SAML Tokens
T1055.005 - Thread Local Storage
T1569.002 - Service Execution
T1218.010 - Regsvr32
T1590.006 - Network Security Appliances
T1556.005 - Reversible Encryption
T1059.012 - Hypervisor CLI

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る

MTA 2016-01-25 - EITEST ANGLER EK FROM 86.106.93.21

概要

Indicators

類似Pulses

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

Pulse – 脅威アクターグラフ