Trusted Design

RuMMS: The Latest Family of Android Malware

概要

Recently we observed an Android malware family being used to attack users in Russia. The malware samples were mainly distributed through a series of malicious subdomains registered under a legitimate domain belonging to a well-known shared hosting service provider in Russia. Because all the URLs used in this campaign have the form of hxxp://yyyyyyyy[.]XXXX.ru/mms.apk (where XXXX.ru represents the hosting provider’s domain), we named this malware family RuMMS. source : https://www.fireeye.com/blog/threat-research/2016/04/rumms-android-malware.html

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Kemoge: Another Mobile Malicious Adware Infecting Android (score: 0.67)
Kemoge: Another Mobile Malicious Adware (score: 0.66)
Group 123 (update June 4th 2018) (score: 0.66)
Koler Android Ransomware Targets the US with Fake Apps (score: 0.65)
ZBot Malware (score: 0.64)

このPulseに関連する脅威アクター (事実ベース)

Mustard Tempest

Score: 14.33

Matched TTPs:

T1583.008 - Malvertising
T1608.001 - Upload Malware
T1608.006 - SEO Poisoning
T1584.001 - Domains

MITREへのリンク →

Sandworm Team

Score: 4.98

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1203 - Exploitation for Client Execution

MITREへのリンク →

TA2541

Score: 6.24

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

Earth Lusca

Score: 3.49

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains

MITREへのリンク →

Mustang Panda

Score: 15.63

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1203 - Exploitation for Client Execution
T1001.003 - Protocol or Service Impersonation
T1027.007 - Dynamic API Resolution
T1564.001 - Hidden Files and Directories

MITREへのリンク →

LuminousMoth

Score: 4.64

Matched TTPs:

T1608.001 - Upload Malware
T1564.001 - Hidden Files and Directories

MITREへのリンク →

Kimsuky

Score: 12.16

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1036.004 - Masquerade Task or Service
T1102.001 - Dead Drop Resolver
T1584.001 - Domains

MITREへのリンク →

OilRig

Score: 7.73

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1203 - Exploitation for Client Execution
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

TeamTNT

Score: 3.49

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains

MITREへのリンク →

LazyScripter

Score: 3.49

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains

MITREへのリンク →

Gamaredon Group

Score: 6.52

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1039 - Data from Network Shared Drive

MITREへのリンク →

Star Blizzard

Score: 3.49

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains

MITREへのリンク →

Threat Group-3390

Score: 4.98

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1203 - Exploitation for Client Execution

MITREへのリンク →

SideCopy

Score: 5.26

Matched TTPs:

T1608.001 - Upload Malware
T1584.001 - Domains

MITREへのリンク →

TA505

Score: 3.49

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains

MITREへのリンク →

BITTER

Score: 7.08

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1036.004 - Masquerade Task or Service
T1203 - Exploitation for Client Execution

MITREへのリンク →

APT32

Score: 9.75

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1036.004 - Masquerade Task or Service
T1203 - Exploitation for Client Execution
T1564.001 - Hidden Files and Directories

MITREへのリンク →

HEXANE

Score: 3.49

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains

MITREへのリンク →

Saint Bear

Score: 3.47

Matched TTPs:

T1608.001 - Upload Malware
T1203 - Exploitation for Client Execution

MITREへのリンク →

Moonstone Sleet

Score: 3.49

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains

MITREへのリンク →

Contagious Interview

Score: 3.49

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains

MITREへのリンク →

FIN7

Score: 8.25

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1036.004 - Masquerade Task or Service
T1564.001 - Hidden Files and Directories

MITREへのリンク →

EXOTIC LILY

Score: 4.98

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1203 - Exploitation for Client Execution

MITREへのリンク →

APT42

Score: 6.24

Matched TTPs:

T1608.001 - Upload Malware
T1583.001 - Domains
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

APT28

Score: 17.38

Matched TTPs:

T1583.001 - Domains
T1039 - Data from Network Shared Drive
T1203 - Exploitation for Client Execution
T1564.001 - Hidden Files and Directories
T1137.002 - Office Test
T1550.001 - Application Access Token

MITREへのリンク →

APT1

Score: 4.80

Matched TTPs:

T1583.001 - Domains
T1584.001 - Domains

MITREへのリンク →

Leviathan

Score: 3.01

Matched TTPs:

T1583.001 - Domains
T1203 - Exploitation for Client Execution

MITREへのリンク →

Dragonfly

Score: 3.01

Matched TTPs:

T1583.001 - Domains
T1203 - Exploitation for Client Execution

MITREへのリンク →

Transparent Tribe

Score: 8.96

Matched TTPs:

T1583.001 - Domains
T1203 - Exploitation for Client Execution
T1564.001 - Hidden Files and Directories
T1584.001 - Domains

MITREへのリンク →

ZIRCONIUM

Score: 3.61

Matched TTPs:

T1583.001 - Domains
T1036.004 - Masquerade Task or Service

MITREへのリンク →

RedEcho

Score: 4.26

Matched TTPs:

T1583.001 - Domains
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

Lazarus Group

Score: 15.75

Matched TTPs:

T1583.001 - Domains
T1036.004 - Masquerade Task or Service
T1203 - Exploitation for Client Execution
T1001.003 - Protocol or Service Impersonation
T1027.007 - Dynamic API Resolution
T1564.001 - Hidden Files and Directories

MITREへのリンク →

Sea Turtle

Score: 3.01

Matched TTPs:

T1583.001 - Domains
T1203 - Exploitation for Client Execution

MITREへのリンク →

Magic Hound

Score: 6.90

Matched TTPs:

T1583.001 - Domains
T1036.004 - Masquerade Task or Service
T1584.001 - Domains

MITREへのリンク →

Winter Vivern

Score: 3.61

Matched TTPs:

T1583.001 - Domains
T1036.004 - Masquerade Task or Service

MITREへのリンク →

menuPass

Score: 4.55

Matched TTPs:

T1583.001 - Domains
T1039 - Data from Network Shared Drive

MITREへのリンク →

FIN13

Score: 4.76

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1564.001 - Hidden Files and Directories

MITREへのリンク →

FIN6

Score: 4.84

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

Fox Kitten

Score: 5.13

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1039 - Data from Network Shared Drive

MITREへのリンク →

UNC3886

Score: 3.59

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1203 - Exploitation for Client Execution

MITREへのリンク →

Higaisa

Score: 7.43

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1203 - Exploitation for Client Execution
T1001.003 - Protocol or Service Impersonation

MITREへのリンク →

Storm-0501

Score: 5.94

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1537 - Transfer Data to Cloud Account

MITREへのリンク →

APT41

Score: 6.87

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1203 - Exploitation for Client Execution
T1102.001 - Dead Drop Resolver

MITREへのリンク →

RedCurl

Score: 12.29

Matched TTPs:

T1039 - Data from Network Shared Drive
T1573.002 - Asymmetric Cryptography
T1537 - Transfer Data to Cloud Account
T1564.001 - Hidden Files and Directories

MITREへのリンク →

BRONZE BUTLER

Score: 7.81

Matched TTPs:

T1039 - Data from Network Shared Drive
T1203 - Exploitation for Client Execution
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Sowbug

Score: 3.03

Matched TTPs:

T1039 - Data from Network Shared Drive

MITREへのリンク →

Chimera

Score: 3.03

Matched TTPs:

T1039 - Data from Network Shared Drive

MITREへのリンク →

APT29

Score: 10.57

Matched TTPs:

T1203 - Exploitation for Client Execution
T1090.004 - Domain Fronting
T1027.006 - HTML Smuggling

MITREへのリンク →

Patchwork

Score: 4.78

Matched TTPs:

T1203 - Exploitation for Client Execution
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Axiom

Score: 6.03

Matched TTPs:

T1203 - Exploitation for Client Execution
T1001.002 - Steganography

MITREへのリンク →

Cobalt Group

Score: 4.24

Matched TTPs:

T1203 - Exploitation for Client Execution
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

Tropic Trooper

Score: 6.91

Matched TTPs:

T1203 - Exploitation for Client Execution
T1573.002 - Asymmetric Cryptography
T1564.001 - Hidden Files and Directories

MITREへのリンク →

Medusa Group

Score: 7.28

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1218.014 - MMC

MITREへのリンク →

INC Ransom

Score: 3.84

Matched TTPs:

T1537 - Transfer Data to Cloud Account

MITREへのリンク →

Rocke

Score: 5.95

Matched TTPs:

T1564.001 - Hidden Files and Directories
T1102.001 - Dead Drop Resolver

MITREへのリンク →

HAFNIUM

Score: 6.80

Matched TTPs:

T1564.001 - Hidden Files and Directories
T1550.001 - Application Access Token

MITREへのリンク →

RTM

Score: 3.29

Matched TTPs:

T1102.001 - Dead Drop Resolver

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

APT28

Score: 0.84

Matched TTPs:

T1583.001 - Domains
T1564.001 - Hidden Files and Directories
T1550.001 - Application Access Token
T1203 - Exploitation for Client Execution
T1039 - Data from Network Shared Drive
T1137.002 - Office Test

MITREへのリンク →

Lazarus Group

Score: 0.76

Matched TTPs:

T1583.001 - Domains
T1001.003 - Protocol or Service Impersonation
T1027.007 - Dynamic API Resolution
T1564.001 - Hidden Files and Directories
T1203 - Exploitation for Client Execution
T1036.004 - Masquerade Task or Service

MITREへのリンク →

Mustang Panda

Score: 0.74

Matched TTPs:

T1583.001 - Domains
T1001.003 - Protocol or Service Impersonation
T1027.007 - Dynamic API Resolution
T1564.001 - Hidden Files and Directories
T1203 - Exploitation for Client Execution
T1608.001 - Upload Malware

MITREへのリンク →

Mustard Tempest

Score: 0.73

Matched TTPs:

T1584.001 - Domains
T1608.006 - SEO Poisoning
T1583.008 - Malvertising
T1608.001 - Upload Malware

MITREへのリンク →

Kimsuky

Score: 0.61

Matched TTPs:

T1102.001 - Dead Drop Resolver
T1583.001 - Domains
T1584.001 - Domains
T1036.004 - Masquerade Task or Service
T1608.001 - Upload Malware

MITREへのリンク →

RedCurl

Score: 0.61

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1564.001 - Hidden Files and Directories
T1039 - Data from Network Shared Drive
T1537 - Transfer Data to Cloud Account

MITREへのリンク →

APT29

Score: 0.56

Matched TTPs:

T1027.006 - HTML Smuggling
T1203 - Exploitation for Client Execution
T1090.004 - Domain Fronting

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る