BOUNCER (FAMILY)
概要
BOUNCER will load an extracted DLL into memory, and then will call the DLL's dump export. The dump export is called with the parameters passed via the command line to the BOUNCER executable. It requires at least two arguments, the IP and port to send the password dump information. It can accept at most five arguments, including a proxy IP, port and an x.509 key for SSL authentication. The DLL backdoor has the capability to execute arbitrary commands, collect database and server information, brute force SQL login credentials, launch arbitrary programs, create processes and threads, delete files, and redirect network traffic.
Created: 2026-02-23
Indicators
Indicatorsは見つかっていない。
類似Pulses
このPulseに関連する脅威アクター (事実ベース)
Score: 5.23
Matched TTPs:
- T1583.006 - Web Services
- T1556.005 - Reversible Encryption
- T1547.008 - LSASS Driver
MITREへのリンク →
Score: 6.50
Matched TTPs:
- T1583.006 - Web Services
- T1537 - Transfer Data to Cloud Account
- T1569.002 - Service Execution
MITREへのリンク →
Score: 8.30
Matched TTPs:
- T1583.006 - Web Services
- T1556.005 - Reversible Encryption
- T1587 - Develop Capabilities
- T1490 - Inhibit System Recovery
MITREへのリンク →
Score: 5.37
Matched TTPs:
- T1583.006 - Web Services
- T1556.005 - Reversible Encryption
- T1490 - Inhibit System Recovery
MITREへのリンク →
Score: 4.18
Matched TTPs:
- T1583.006 - Web Services
- T1490 - Inhibit System Recovery
MITREへのリンク →
Score: 6.33
Matched TTPs:
- T1583.006 - Web Services
- T1556.009 - Conditional Access Policies
- T1556.005 - Reversible Encryption
MITREへのリンク →
Score: 4.76
Matched TTPs:
- T1583.006 - Web Services
- T1537 - Transfer Data to Cloud Account
- T1556.005 - Reversible Encryption
MITREへのリンク →
Score: 9.77
Matched TTPs:
- T1583.006 - Web Services
- T1097 - Pass the Ticket
- T1556.005 - Reversible Encryption
- T1546.007 - Netsh Helper DLL
MITREへのリンク →
Score: 13.83
Matched TTPs:
- T1583.006 - Web Services
- T1556.005 - Reversible Encryption
- T1587 - Develop Capabilities
- T1547.008 - LSASS Driver
- T1569.002 - Service Execution
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 9.38
Matched TTPs:
- T1583.006 - Web Services
- T1097 - Pass the Ticket
- T1537 - Transfer Data to Cloud Account
- T1204.001 - Malicious Link
MITREへのリンク →
Score: 4.67
Matched TTPs:
- T1583.006 - Web Services
- T1546.017 - Udev Rules
MITREへのリンク →
Score: 12.58
Matched TTPs:
- T1583.006 - Web Services
- T1537 - Transfer Data to Cloud Account
- T1556.005 - Reversible Encryption
- T1204.001 - Malicious Link
- T1094 - Custom Command and Control Protocol
MITREへのリンク →
Score: 5.45
Matched TTPs:
- T1583.006 - Web Services
- T1556.005 - Reversible Encryption
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 4.04
Matched TTPs:
- T1583.006 - Web Services
- T1547.008 - LSASS Driver
MITREへのリンク →
Score: 4.18
Matched TTPs:
- T1583.006 - Web Services
- T1490 - Inhibit System Recovery
MITREへのリンク →
Score: 17.37
Matched TTPs:
- T1583.006 - Web Services
- T1097 - Pass the Ticket
- T1556.009 - Conditional Access Policies
- T1556.005 - Reversible Encryption
- T1587 - Develop Capabilities
- T1569.002 - Service Execution
- T1490 - Inhibit System Recovery
MITREへのリンク →
Score: 4.76
Matched TTPs:
- T1583.006 - Web Services
- T1537 - Transfer Data to Cloud Account
- T1556.005 - Reversible Encryption
MITREへのリンク →
Score: 5.23
Matched TTPs:
- T1583.006 - Web Services
- T1556.005 - Reversible Encryption
- T1547.008 - LSASS Driver
MITREへのリンク →
Score: 10.58
Matched TTPs:
- T1583.006 - Web Services
- T1001 - Data Obfuscation
- T1537 - Transfer Data to Cloud Account
- T1556.005 - Reversible Encryption
- T1490 - Inhibit System Recovery
MITREへのリンク →
Score: 8.79
Matched TTPs:
- T1583.006 - Web Services
- T1556.005 - Reversible Encryption
- T1569.002 - Service Execution
- T1546.017 - Udev Rules
MITREへのリンク →
Score: 4.04
Matched TTPs:
- T1583.006 - Web Services
- T1097 - Pass the Ticket
MITREへのリンク →
Score: 14.12
Matched TTPs:
- T1583.006 - Web Services
- T1097 - Pass the Ticket
- T1556.009 - Conditional Access Policies
- T1556.005 - Reversible Encryption
- T1547.008 - LSASS Driver
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 3.57
Matched TTPs:
- T1583.006 - Web Services
- T1537 - Transfer Data to Cloud Account
MITREへのリンク →
Score: 5.86
Matched TTPs:
- T1583.006 - Web Services
- T1556.005 - Reversible Encryption
- T1546.017 - Udev Rules
MITREへのリンク →
Score: 11.82
Matched TTPs:
- T1583.006 - Web Services
- T1097 - Pass the Ticket
- T1537 - Transfer Data to Cloud Account
- T1556.005 - Reversible Encryption
- T1059.005 - Visual Basic
MITREへのリンク →
Score: 5.76
Matched TTPs:
- T1097 - Pass the Ticket
- T1537 - Transfer Data to Cloud Account
- T1556.005 - Reversible Encryption
MITREへのリンク →
Score: 8.69
Matched TTPs:
- T1097 - Pass the Ticket
- T1537 - Transfer Data to Cloud Account
- T1556.005 - Reversible Encryption
- T1569.002 - Service Execution
MITREへのリンク →
Score: 9.54
Matched TTPs:
- T1001 - Data Obfuscation
- T1537 - Transfer Data to Cloud Account
- T1556.005 - Reversible Encryption
- T1546.017 - Udev Rules
MITREへのリンク →
Score: 5.20
Matched TTPs:
- T1001 - Data Obfuscation
- T1537 - Transfer Data to Cloud Account
MITREへのリンク →
Score: 7.62
Matched TTPs:
- T1001 - Data Obfuscation
- T1556.005 - Reversible Encryption
- T1204.001 - Malicious Link
MITREへのリンク →
Score: 8.36
Matched TTPs:
- T1001 - Data Obfuscation
- T1537 - Transfer Data to Cloud Account
- T1546.017 - Udev Rules
MITREへのリンク →
Score: 13.77
Matched TTPs:
- T1556.009 - Conditional Access Policies
- T1556.005 - Reversible Encryption
- T1587 - Develop Capabilities
- T1204.001 - Malicious Link
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 11.78
Matched TTPs:
- T1555.004 - Windows Credential Manager
- T1537 - Transfer Data to Cloud Account
- T1547.008 - LSASS Driver
- T1490 - Inhibit System Recovery
MITREへのリンク →
Score: 5.76
Matched TTPs:
- T1537 - Transfer Data to Cloud Account
- T1556.005 - Reversible Encryption
- T1547.008 - LSASS Driver
MITREへのリンク →
Score: 6.17
Matched TTPs:
- T1537 - Transfer Data to Cloud Account
- T1556.005 - Reversible Encryption
- T1587 - Develop Capabilities
MITREへのリンク →
Score: 3.71
Matched TTPs:
- T1556.005 - Reversible Encryption
- T1547.008 - LSASS Driver
MITREへのリンク →
Score: 6.60
Matched TTPs:
- T1556.005 - Reversible Encryption
- T1556 - Modify Authentication Process
- T1490 - Inhibit System Recovery
MITREへのリンク →
Score: 8.65
Matched TTPs:
- T1556.005 - Reversible Encryption
- T1686.001 - Cloud Firewall
- T1569.002 - Service Execution
MITREへのリンク →
Score: 3.93
Matched TTPs:
- T1556.005 - Reversible Encryption
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 3.93
Matched TTPs:
- T1556.005 - Reversible Encryption
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 3.85
Matched TTPs:
- T1556.005 - Reversible Encryption
- T1490 - Inhibit System Recovery
MITREへのリンク →
Score: 4.47
Matched TTPs:
- T1556.005 - Reversible Encryption
- T1204.001 - Malicious Link
MITREへのリンク →
Score: 3.84
Matched TTPs:
- T1498 - Network Denial of Service
MITREへのリンク →
Score: 7.13
Matched TTPs:
- T1498 - Network Denial of Service
- T1204.001 - Malicious Link
MITREへのリンク →
Score: 6.59
Matched TTPs:
- T1498 - Network Denial of Service
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 9.81
Matched TTPs:
- T1651 - Cloud Administration Command
- T1547.008 - LSASS Driver
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 6.08
Matched TTPs:
- T1587 - Develop Capabilities
- T1546.017 - Udev Rules
MITREへのリンク →
Score: 4.54
Matched TTPs:
- T1686 - Disable or Modify System Firewall
MITREへのリンク →
Score: 5.27
Matched TTPs:
- T1547.008 - LSASS Driver
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 5.59
Matched TTPs:
- T1569.002 - Service Execution
- T1490 - Inhibit System Recovery
MITREへのリンク →
このPulseに関連する脅威アクター (推論ベース)
Score: 0.75
Matched TTPs:
- T1583.006 - Web Services
- T1097 - Pass the Ticket
- T1490 - Inhibit System Recovery
- T1556.009 - Conditional Access Policies
- T1569.002 - Service Execution
- T1556.005 - Reversible Encryption
- T1587 - Develop Capabilities
MITREへのリンク →
Score: 0.60
Matched TTPs:
- T1583.006 - Web Services
- T1556 - Modify Authentication Process
- T1547.008 - LSASS Driver
- T1569.002 - Service Execution
- T1556.005 - Reversible Encryption
- T1587 - Develop Capabilities
MITREへのリンク →
Score: 0.59
Matched TTPs:
- T1556 - Modify Authentication Process
- T1204.001 - Malicious Link
- T1556.009 - Conditional Access Policies
- T1556.005 - Reversible Encryption
- T1587 - Develop Capabilities
MITREへのリンク →
Score: 0.58
Matched TTPs:
- T1583.006 - Web Services
- T1556 - Modify Authentication Process
- T1547.008 - LSASS Driver
- T1097 - Pass the Ticket
- T1556.009 - Conditional Access Policies
- T1556.005 - Reversible Encryption
MITREへのリンク →
Related CVEs
このPulseに見つかったCVEはありません。
Pulse – 脅威アクター グラフ
← Pulse一覧に戻る
Trusted Design