BEDEP LURKING IN ANGLER'S SHADOWS
概要
In October 2015, Talos released our detailed investigation of the Angler Exploit Kit which outlined the infrastructure and monetary impact of an exploit kit campaign delivering ransomware. During the investigation we found that two thirds of Angler's payloads were some variation of ransomware and noted one of the other major payloads was Bedep. Bedep is a malware downloader that is exclusive to Angler. This post will discuss the Bedep side of Angler and draw some pretty clear connections between Angler and Bedep.
Created: 2026-02-23
Indicators
Indicatorsは見つかっていない。
類似Pulses
このPulseに関連する脅威アクター (事実ベース)
Score: 6.99
Matched TTPs:
- T1608.005 - Link Target
- T1199 - Trusted Relationship
- T1055.005 - Thread Local Storage
MITREへのリンク →
Score: 6.99
Matched TTPs:
- T1608.005 - Link Target
- T1199 - Trusted Relationship
- T1055.005 - Thread Local Storage
MITREへのリンク →
Score: 10.28
Matched TTPs:
- T1608.005 - Link Target
- T1199 - Trusted Relationship
- T1003.003 - NTDS
- T1008 - Fallback Channels
MITREへのリンク →
Score: 4.13
Matched TTPs:
- T1199 - Trusted Relationship
- T1008 - Fallback Channels
MITREへのリンク →
Score: 4.13
Matched TTPs:
- T1199 - Trusted Relationship
- T1008 - Fallback Channels
MITREへのリンク →
Score: 4.13
Matched TTPs:
- T1199 - Trusted Relationship
- T1008 - Fallback Channels
MITREへのリンク →
Score: 5.39
Matched TTPs:
- T1199 - Trusted Relationship
- T1053.006 - Systemd Timers
MITREへのリンク →
Score: 5.39
Matched TTPs:
- T1199 - Trusted Relationship
- T1059.005 - Visual Basic
MITREへのリンク →
Score: 3.29
Matched TTPs:
- T1008 - Fallback Channels
MITREへのリンク →
Score: 3.29
Matched TTPs:
- T1008 - Fallback Channels
MITREへのリンク →
このPulseに関連する脅威アクター (推論ベース)
Score: 0.78
Matched TTPs:
- T1003.003 - NTDS
- T1199 - Trusted Relationship
- T1608.005 - Link Target
- T1008 - Fallback Channels
MITREへのリンク →
Score: 0.58
Matched TTPs:
- T1199 - Trusted Relationship
- T1608.005 - Link Target
- T1055.005 - Thread Local Storage
MITREへのリンク →
Score: 0.56
Matched TTPs:
- T1199 - Trusted Relationship
- T1608.005 - Link Target
- T1055.005 - Thread Local Storage
MITREへのリンク →
Related CVEs
このPulseに見つかったCVEはありません。
Pulse – 脅威アクター グラフ
← Pulse一覧に戻る