Trusted Design

MAPIGET (FAMILY)

概要

This malware utility is a set of two files that operate in conjunction to extract email messages and attachments from an Exchange server. In order to operate successfully, these programs require authentication credentials for a user on the Exchange server, and must be run from a machine joined to the domain that has Microsoft Outlook installed (or equivalent software that provides the Microsoft 'Messaging API' (MAPI) service).

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

HackTool:Win32/MailLogger (score: 0.56)
Emotet Trojan Acts as Loader, Spreads Automatically (score: 0.53)
TrickBot comes with new tricks - attacking Outlook and browsing data (score: 0.53)
Malware Analysis Report (MAR) (score: 0.52)
Microsoft Word Intruder: Operation Pony Express (score: 0.52)

このPulseに関連する脅威アクター (事実ベース)

Scattered Spider

Score: 15.55

Matched TTPs:

T1666 - Modify Cloud Resource Hierarchy
T1583.001 - Domains
T1197 - BITS Jobs
T1588.005 - Exploits

MITREへのリンク →

FIN4

Score: 8.46

Matched TTPs:

T1666 - Modify Cloud Resource Hierarchy
T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1204.003 - Malicious Image

MITREへのリンク →

Kimsuky

Score: 31.97

Matched TTPs:

T1053.007 - Container Orchestration Job
T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1131 - Authentication Package
T1218.012 - Verclsid
T1001 - Data Obfuscation
T1204.003 - Malicious Image
T1197 - BITS Jobs
T1537 - Transfer Data to Cloud Account
T1008 - Fallback Channels
T1053.002 - At
T1490 - Inhibit System Recovery

MITREへのリンク →

Mustang Panda

Score: 12.27

Matched TTPs:

T1053.007 - Container Orchestration Job
T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid
T1055.005 - Thread Local Storage

MITREへのリンク →

RedCurl

Score: 8.57

Matched TTPs:

T1587.003 - Digital Certificates
T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1016.002 - Wi-Fi Discovery

MITREへのリンク →

Sea Turtle

Score: 5.95

Matched TTPs:

T1587.003 - Digital Certificates
T1490 - Inhibit System Recovery

MITREへのリンク →

APT1

Score: 10.11

Matched TTPs:

T1587.003 - Digital Certificates
T1598.003 - Spearphishing Link
T1204.003 - Malicious Image
T1053.002 - At

MITREへのリンク →

Chimera

Score: 5.95

Matched TTPs:

T1587.003 - Digital Certificates
T1204.003 - Malicious Image

MITREへのリンク →

Magic Hound

Score: 13.65

Matched TTPs:

T1587.003 - Digital Certificates
T1087.002 - Domain Account
T1016.002 - Wi-Fi Discovery
T1204.003 - Malicious Image
T1053.002 - At

MITREへのリンク →

Winter Vivern

Score: 4.16

Matched TTPs:

T1587.003 - Digital Certificates
T1598.003 - Spearphishing Link

MITREへのリンク →

Cobalt Group

Score: 4.41

Matched TTPs:

T1206 - Sudo Caching
T1087.002 - Domain Account
T1598.003 - Spearphishing Link

MITREへのリンク →

FIN7

Score: 9.42

Matched TTPs:

T1206 - Sudo Caching
T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid
T1490 - Inhibit System Recovery

MITREへのリンク →

MuddyWater

Score: 6.75

Matched TTPs:

T1206 - Sudo Caching
T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid

MITREへのリンク →

Sidewinder

Score: 10.37

Matched TTPs:

T1206 - Sudo Caching
T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid
T1657 - Financial Theft

MITREへのリンク →

APT28

Score: 22.06

Matched TTPs:

T1206 - Sudo Caching
T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1131 - Authentication Package
T1204.003 - Malicious Image
T1197 - BITS Jobs
T1055.008 - Ptrace System Calls
T1566.003 - Spearphishing via Service

MITREへのリンク →

APT37

Score: 4.41

Matched TTPs:

T1206 - Sudo Caching
T1087.002 - Domain Account
T1598.003 - Spearphishing Link

MITREへのリンク →

Gallmaker

Score: 4.41

Matched TTPs:

T1206 - Sudo Caching
T1087.002 - Domain Account
T1598.003 - Spearphishing Link

MITREへのリンク →

Leviathan

Score: 7.56

Matched TTPs:

T1206 - Sudo Caching
T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1546.017 - Udev Rules

MITREへのリンク →

BITTER

Score: 4.41

Matched TTPs:

T1206 - Sudo Caching
T1087.002 - Domain Account
T1598.003 - Spearphishing Link

MITREへのリンク →

TA505

Score: 13.37

Matched TTPs:

T1206 - Sudo Caching
T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1685.002 - Disable or Modify Cloud Log
T1016.002 - Wi-Fi Discovery
T1537 - Transfer Data to Cloud Account

MITREへのリンク →

Patchwork

Score: 12.90

Matched TTPs:

T1206 - Sudo Caching
T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1001 - Data Obfuscation
T1537 - Transfer Data to Cloud Account
T1008 - Fallback Channels

MITREへのリンク →

Machete

Score: 4.95

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1685.002 - Disable or Modify Cloud Log

MITREへのリンク →

Elderwood

Score: 3.72

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1537 - Transfer Data to Cloud Account

MITREへのリンク →

Transparent Tribe

Score: 4.95

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1053.002 - At

MITREへのリンク →

Dragonfly

Score: 7.95

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1657 - Financial Theft
T1204.003 - Malicious Image

MITREへのリンク →

Contagious Interview

Score: 4.07

Matched TTPs:

T1087.002 - Domain Account
T1131 - Authentication Package

MITREへのリンク →

RTM

Score: 4.95

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1008 - Fallback Channels

MITREへのリンク →

Tropic Trooper

Score: 4.33

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1490 - Inhibit System Recovery

MITREへのリンク →

menuPass

Score: 4.81

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1001 - Data Obfuscation

MITREへのリンク →

TA551

Score: 4.00

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid

MITREへのリンク →

Threat Group-3390

Score: 10.02

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1001 - Data Obfuscation
T1537 - Transfer Data to Cloud Account
T1546.017 - Udev Rules

MITREへのリンク →

LazyScripter

Score: 4.00

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid

MITREへのリンク →

PROMETHIUM

Score: 3.45

Matched TTPs:

T1087.002 - Domain Account
T1490 - Inhibit System Recovery

MITREへのリンク →

APT39

Score: 3.72

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1537 - Transfer Data to Cloud Account

MITREへのリンク →

Star Blizzard

Score: 7.95

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1657 - Financial Theft
T1204.003 - Malicious Image

MITREへのリンク →

Higaisa

Score: 4.81

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1546.017 - Udev Rules

MITREへのリンク →

Rancor

Score: 4.95

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1685.002 - Disable or Modify Cloud Log

MITREへのリンク →

Wizard Spider

Score: 5.28

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1556.009 - Conditional Access Policies

MITREへのリンク →

OilRig

Score: 9.82

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1592.002 - Software
T1556.009 - Conditional Access Policies

MITREへのリンク →

Sandworm Team

Score: 5.28

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1016.002 - Wi-Fi Discovery

MITREへのリンク →

Inception

Score: 4.00

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid

MITREへのリンク →

Saint Bear

Score: 3.72

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1537 - Transfer Data to Cloud Account

MITREへのリンク →

Lazarus Group

Score: 8.14

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid
T1055.005 - Thread Local Storage

MITREへのリンク →

Moonstone Sleet

Score: 5.10

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1197 - BITS Jobs

MITREへのリンク →

Gorgon Group

Score: 4.81

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1001 - Data Obfuscation

MITREへのリンク →

TA2541

Score: 12.36

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid
T1001 - Data Obfuscation
T1537 - Transfer Data to Cloud Account
T1546.017 - Udev Rules

MITREへのリンク →

Earth Lusca

Score: 3.13

Matched TTPs:

T1087.002 - Domain Account
T1218.012 - Verclsid

MITREへのリンク →

SideCopy

Score: 10.91

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid
T1657 - Financial Theft
T1053.002 - At

MITREへのリンク →

Mofang

Score: 4.81

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1546.017 - Udev Rules

MITREへのリンク →

BRONZE BUTLER

Score: 4.95

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1008 - Fallback Channels

MITREへのリンク →

APT38

Score: 9.34

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1685.002 - Disable or Modify Cloud Log
T1218.012 - Verclsid
T1537 - Transfer Data to Cloud Account

MITREへのリンク →

Molerats

Score: 8.10

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1685.002 - Disable or Modify Cloud Log
T1546.017 - Udev Rules

MITREへのリンク →

Gamaredon Group

Score: 7.16

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid
T1546.017 - Udev Rules

MITREへのリンク →

APT32

Score: 9.95

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1131 - Authentication Package
T1218.012 - Verclsid
T1490 - Inhibit System Recovery

MITREへのリンク →

The White Company

Score: 3.72

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1537 - Transfer Data to Cloud Account

MITREへのリンク →

APT29

Score: 11.39

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid
T1204.003 - Malicious Image
T1537 - Transfer Data to Cloud Account
T1490 - Inhibit System Recovery

MITREへのリンク →

Confucius

Score: 4.00

Matched TTPs:

T1087.002 - Domain Account
T1598.003 - Spearphishing Link
T1218.012 - Verclsid

MITREへのリンク →

APT41

Score: 6.21

Matched TTPs:

T1598.003 - Spearphishing Link
T1537 - Transfer Data to Cloud Account
T1008 - Fallback Channels

MITREへのリンク →

ZIRCONIUM

Score: 8.78

Matched TTPs:

T1685.002 - Disable or Modify Cloud Log
T1197 - BITS Jobs
T1537 - Transfer Data to Cloud Account

MITREへのリンク →

APT42

Score: 4.13

Matched TTPs:

T1583.001 - Domains

MITREへのリンク →

Turla

Score: 9.57

Matched TTPs:

T1131 - Authentication Package
T1556.009 - Conditional Access Policies
T1490 - Inhibit System Recovery

MITREへのリンク →

SilverTerrier

Score: 3.29

Matched TTPs:

T1131 - Authentication Package

MITREへのリンク →

BlackByte

Score: 3.15

Matched TTPs:

T1001 - Data Obfuscation

MITREへのリンク →

HAFNIUM

Score: 9.46

Matched TTPs:

T1204.003 - Malicious Image
T1055.008 - Ptrace System Calls
T1490 - Inhibit System Recovery

MITREへのリンク →

Stealth Falcon

Score: 3.62

Matched TTPs:

T1556.009 - Conditional Access Policies

MITREへのリンク →

Rocke

Score: 5.34

Matched TTPs:

T1537 - Transfer Data to Cloud Account
T1008 - Fallback Channels

MITREへのリンク →

Medusa Group

Score: 6.59

Matched TTPs:

T1537 - Transfer Data to Cloud Account
T1094 - Custom Command and Control Protocol

MITREへのリンク →

Equation

Score: 4.13

Matched TTPs:

T1130 - Install Root Certificate

MITREへのリンク →

Strider

Score: 4.13

Matched TTPs:

T1130 - Install Root Certificate

MITREへのリンク →

FIN13

Score: 4.54

Matched TTPs:

T1686.001 - Cloud Firewall

MITREへのリンク →

Mustard Tempest

Score: 3.29

Matched TTPs:

T1053.002 - At

MITREへのリンク →

Fox Kitten

Score: 3.84

Matched TTPs:

T1588.005 - Exploits

MITREへのリンク →

LAPSUS$

Score: 3.84

Matched TTPs:

T1588.005 - Exploits

MITREへのリンク →

Velvet Ant

Score: 6.80

Matched TTPs:

T1490 - Inhibit System Recovery
T1566.003 - Spearphishing via Service

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.75

Matched TTPs:

T1218.012 - Verclsid
T1490 - Inhibit System Recovery
T1598.003 - Spearphishing Link
T1131 - Authentication Package
T1204.003 - Malicious Image
T1008 - Fallback Channels
T1053.002 - At
T1087.002 - Domain Account
T1537 - Transfer Data to Cloud Account
T1001 - Data Obfuscation
T1053.007 - Container Orchestration Job
T1197 - BITS Jobs

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る