Trusted Design

Domains and Hostnames from the BlackEnergy report

概要

Attacks on critical infrastructure are a top concern for government officials and the private sector alike. The ramifications of losing power can be life threatening and have a negative impact on operations of businesses and public services. Just before Christmas 2015, BlackEnergy was used to knock out power for approximately 80,000 people in Ukraine, bringing greater focus on the potential for this type of attack around the world. During RSA 2016, the New York Times reported that “After an extensive inquiry, American investigators concluded that the attack in Ukraine on Dec. 23 may well have been the first power blackout triggered by a cyberattack — a circumstance many have long predicted.” ThreatSTOP has published an in depth report on BlackEnergy chronicling its history, infection vectors and use cases. The report was published by ThreatSTOP’s Israeli-based security team. This pulse contains all the hostnames and domains related to the report

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

New wave of cyberattacks against Ukrainian power industry (score: 0.77)
BlackEnergy by the SSHBearDoor (score: 0.77)
20160119: Ukraine Power Industry Cyberattacks (score: 0.75)
BlackEnergy APT Attacks in Ukraine employ spearphishing Word (score: 0.75)
KillDisk and BlackEnergy Are Not Just Energy Sector Threats (score: 0.71)

このPulseに関連する脅威アクター (事実ベース)

Kimsuky

Score: 24.63

Matched TTPs:

T1033 - System Owner/User Discovery
T1053.007 - Container Orchestration Job
T1098.007 - Additional Local or Domain Groups
T1567.004 - Exfiltration Over Webhook
T1588.001 - Malware
T1552.003 - Shell History
T1608.005 - Link Target
T1008 - Fallback Channels
T1053.002 - At

MITREへのリンク →

Sea Turtle

Score: 4.55

Matched TTPs:

T1033 - System Owner/User Discovery
T1098.007 - Additional Local or Domain Groups

MITREへのリンク →

Ember Bear

Score: 3.03

Matched TTPs:

T1033 - System Owner/User Discovery

MITREへのリンク →

Indrik Spider

Score: 6.32

Matched TTPs:

T1033 - System Owner/User Discovery
T1600 - Weaken Encryption

MITREへのリンク →

Agrius

Score: 3.03

Matched TTPs:

T1033 - System Owner/User Discovery

MITREへのリンク →

Contagious Interview

Score: 13.22

Matched TTPs:

T1033 - System Owner/User Discovery
T1098.007 - Additional Local or Domain Groups
T1021.006 - Windows Remote Management
T1552.003 - Shell History
T1608.005 - Link Target

MITREへのリンク →

Sandworm Team

Score: 7.84

Matched TTPs:

T1033 - System Owner/User Discovery
T1600 - Weaken Encryption
T1098.007 - Additional Local or Domain Groups

MITREへのリンク →

Star Blizzard

Score: 4.55

Matched TTPs:

T1033 - System Owner/User Discovery
T1098.007 - Additional Local or Domain Groups

MITREへのリンク →

Mustang Panda

Score: 10.41

Matched TTPs:

T1053.007 - Container Orchestration Job
T1098.007 - Additional Local or Domain Groups
T1567.004 - Exfiltration Over Webhook
T1608.005 - Link Target

MITREへのリンク →

Medusa Group

Score: 10.57

Matched TTPs:

T1600 - Weaken Encryption
T1552.003 - Shell History
T1608.005 - Link Target
T1128 - Netsh Helper DLL

MITREへのリンク →

Lazarus Group

Score: 14.25

Matched TTPs:

T1600 - Weaken Encryption
T1098.007 - Additional Local or Domain Groups
T1567.004 - Exfiltration Over Webhook
T1588.001 - Malware
T1608.005 - Link Target
T1578.001 - Create Snapshot

MITREへのリンク →

LAPSUS$

Score: 3.29

Matched TTPs:

T1600 - Weaken Encryption

MITREへのリンク →

Wizard Spider

Score: 5.38

Matched TTPs:

T1600 - Weaken Encryption
T1588.001 - Malware

MITREへのリンク →

APT28

Score: 14.95

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1567.004 - Exfiltration Over Webhook
T1608.005 - Link Target
T1146 - Clear Command History
T1566.003 - Spearphishing via Service

MITREへのリンク →

Storm-1811

Score: 5.14

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1578.002 - Create Cloud Instance

MITREへのリンク →

APT42

Score: 4.26

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1128 - Netsh Helper DLL

MITREへのリンク →

APT1

Score: 4.80

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1053.002 - At

MITREへのリンク →

APT32

Score: 8.37

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1567.004 - Exfiltration Over Webhook
T1588.001 - Malware
T1608.005 - Link Target

MITREへのリンク →

IndigoZebra

Score: 3.53

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1608.005 - Link Target

MITREへのリンク →

Earth Lusca

Score: 3.53

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1608.005 - Link Target

MITREへのリンク →

Scattered Spider

Score: 7.48

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1535 - Unused/Unsupported Cloud Regions
T1552.003 - Shell History

MITREへのリンク →

Dragonfly

Score: 5.14

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1578.002 - Create Cloud Instance

MITREへのリンク →

TA2541

Score: 6.28

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1608.005 - Link Target
T1128 - Netsh Helper DLL

MITREへのリンク →

LazyScripter

Score: 3.53

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1608.005 - Link Target

MITREへのリンク →

Transparent Tribe

Score: 4.80

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1053.002 - At

MITREへのリンク →

ZIRCONIUM

Score: 8.22

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1588.001 - Malware
T1608.005 - Link Target
T1578.001 - Create Snapshot

MITREへのリンク →

RedEcho

Score: 4.26

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1128 - Netsh Helper DLL

MITREへのリンク →

OilRig

Score: 4.26

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1128 - Netsh Helper DLL

MITREへのリンク →

FIN7

Score: 12.35

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1588.001 - Malware
T1608.005 - Link Target
T1564.002 - Hidden Users
T1578.001 - Create Snapshot

MITREへのリンク →

Magic Hound

Score: 12.53

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1588.001 - Malware
T1608.005 - Link Target
T1578.002 - Create Cloud Instance
T1053.002 - At

MITREへのリンク →

APT38

Score: 4.26

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1567.004 - Exfiltration Over Webhook

MITREへのリンク →

Gamaredon Group

Score: 3.53

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1608.005 - Link Target

MITREへのリンク →

Winter Vivern

Score: 3.61

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1588.001 - Malware

MITREへのリンク →

BITTER

Score: 3.61

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1588.001 - Malware

MITREへのリンク →

TeamTNT

Score: 4.96

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1535 - Unused/Unsupported Cloud Regions

MITREへのリンク →

CURIUM

Score: 4.11

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1578.001 - Create Snapshot

MITREへのリンク →

UNC3886

Score: 11.57

Matched TTPs:

T1567.004 - Exfiltration Over Webhook
T1021.006 - Windows Remote Management
T1588.001 - Malware
T1578.001 - Create Snapshot

MITREへのリンク →

APT29

Score: 9.30

Matched TTPs:

T1567.004 - Exfiltration Over Webhook
T1608.005 - Link Target
T1218.009 - Regsvcs/Regasm

MITREへのリンク →

Chimera

Score: 5.34

Matched TTPs:

T1567.004 - Exfiltration Over Webhook
T1578.001 - Create Snapshot

MITREへのリンク →

Rocke

Score: 9.47

Matched TTPs:

T1567.004 - Exfiltration Over Webhook
T1535 - Unused/Unsupported Cloud Regions
T1008 - Fallback Channels

MITREへのリンク →

Storm-0501

Score: 8.06

Matched TTPs:

T1535 - Unused/Unsupported Cloud Regions
T1588.001 - Malware
T1552.003 - Shell History

MITREへのリンク →

Volt Typhoon

Score: 6.03

Matched TTPs:

T1535 - Unused/Unsupported Cloud Regions
T1578.001 - Create Snapshot

MITREへのリンク →

FIN13

Score: 9.16

Matched TTPs:

T1588.001 - Malware
T1552.003 - Shell History
T1053.006 - Systemd Timers

MITREへのリンク →

FIN6

Score: 4.84

Matched TTPs:

T1588.001 - Malware
T1128 - Netsh Helper DLL

MITREへのリンク →

Higaisa

Score: 4.69

Matched TTPs:

T1588.001 - Malware
T1578.001 - Create Snapshot

MITREへのリンク →

APT41

Score: 5.38

Matched TTPs:

T1588.001 - Malware
T1008 - Fallback Channels

MITREへのリンク →

Turla

Score: 4.60

Matched TTPs:

T1608.005 - Link Target
T1578.001 - Create Snapshot

MITREへのリンク →

Darkhotel

Score: 6.72

Matched TTPs:

T1564.002 - Hidden Users
T1578.001 - Create Snapshot

MITREへのリンク →

Velvet Ant

Score: 6.88

Matched TTPs:

T1128 - Netsh Helper DLL
T1566.003 - Spearphishing via Service

MITREへのリンク →

APT3

Score: 3.62

Matched TTPs:

T1578.002 - Create Cloud Instance

MITREへのリンク →

Equation

Score: 4.13

Matched TTPs:

T1130 - Install Root Certificate

MITREへのリンク →

Strider

Score: 4.13

Matched TTPs:

T1130 - Install Root Certificate

MITREへのリンク →

Axiom

Score: 4.54

Matched TTPs:

T1160 - Launch Daemon

MITREへのリンク →

BRONZE BUTLER

Score: 5.88

Matched TTPs:

T1578.001 - Create Snapshot
T1008 - Fallback Channels

MITREへのリンク →

RTM

Score: 3.29

Matched TTPs:

T1008 - Fallback Channels

MITREへのリンク →

Patchwork

Score: 3.29

Matched TTPs:

T1008 - Fallback Channels

MITREへのリンク →

SideCopy

Score: 3.29

Matched TTPs:

T1053.002 - At

MITREへのリンク →

Mustard Tempest

Score: 3.29

Matched TTPs:

T1053.002 - At

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.84

Matched TTPs:

T1008 - Fallback Channels
T1588.001 - Malware
T1098.007 - Additional Local or Domain Groups
T1552.003 - Shell History
T1608.005 - Link Target
T1053.007 - Container Orchestration Job
T1033 - System Owner/User Discovery
T1567.004 - Exfiltration Over Webhook
T1053.002 - At

MITREへのリンク →

APT28

Score: 0.58

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1608.005 - Link Target
T1566.003 - Spearphishing via Service
T1567.004 - Exfiltration Over Webhook
T1146 - Clear Command History

MITREへのリンク →

Lazarus Group

Score: 0.56

Matched TTPs:

T1588.001 - Malware
T1098.007 - Additional Local or Domain Groups
T1600 - Weaken Encryption
T1608.005 - Link Target
T1578.001 - Create Snapshot
T1567.004 - Exfiltration Over Webhook

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る