Trusted Design

Remote Code Execution Attempt / auto append file

概要

Attempting to append the pot. analysis of the r.txt shows that the file is Russian with several Russian domains located within the file. The exploit is authored by 1dt.w0lf. Multiple websites supplying exploits by 1dt.w0lf. Looks like a shell / backdoor. Trying to escalate privileges, gain credentials, files and folders.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Possible Credential Stealing Malware (score: 0.58)
Sykipot/WyksolTrojan (score: 0.57)
Probing for shell exploits uploaded using file/image uploaders. (score: 0.57)
Gendwnurl Backdoor (score: 0.56)
Bash Scans (score: 0.56)

このPulseに関連する脅威アクター (事実ベース)

OilRig

Score: 10.63

Matched TTPs:

T1005 - Data from Local System
T1098.007 - Additional Local or Domain Groups
T1556.009 - Conditional Access Policies
T1622 - Debugger Evasion

MITREへのリンク →

Ember Bear

Score: 7.98

Matched TTPs:

T1005 - Data from Local System
T1003.003 - NTDS

MITREへのリンク →

Sandworm Team

Score: 5.36

Matched TTPs:

T1005 - Data from Local System
T1098.007 - Additional Local or Domain Groups

MITREへのリンク →

APT28

Score: 3.28

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI

MITREへのリンク →

HEXANE

Score: 3.17

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1622 - Debugger Evasion

MITREへのリンク →

APT1

Score: 6.45

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1622 - Debugger Evasion
T1053.002 - At

MITREへのリンク →

APT32

Score: 5.95

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI
T1490 - Inhibit System Recovery

MITREへのリンク →

Leviathan

Score: 8.08

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI
T1622 - Debugger Evasion
T1546.017 - Udev Rules

MITREへのリンク →

Earth Lusca

Score: 3.28

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI

MITREへのリンク →

Kimsuky

Score: 13.25

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1622 - Debugger Evasion
T1003.003 - NTDS
T1053.002 - At
T1490 - Inhibit System Recovery

MITREへのリンク →

Scattered Spider

Score: 11.84

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1557.002 - ARP Cache Poisoning
T1027.002 - Software Packing
T1622 - Debugger Evasion

MITREへのリンク →

Dragonfly

Score: 4.93

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI
T1622 - Debugger Evasion

MITREへのリンク →

TA2541

Score: 4.67

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1546.017 - Udev Rules

MITREへのリンク →

Transparent Tribe

Score: 6.57

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI
T1053.002 - At

MITREへのリンク →

Threat Group-3390

Score: 6.43

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI
T1546.017 - Udev Rules

MITREへのリンク →

Mustang Panda

Score: 6.06

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1169 - Sudo

MITREへのリンク →

Lazarus Group

Score: 4.93

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI
T1622 - Debugger Evasion

MITREへのリンク →

FIN7

Score: 5.83

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1622 - Debugger Evasion
T1490 - Inhibit System Recovery

MITREへのリンク →

Sea Turtle

Score: 4.18

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1490 - Inhibit System Recovery

MITREへのリンク →

Magic Hound

Score: 8.22

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI
T1622 - Debugger Evasion
T1053.002 - At

MITREへのリンク →

APT38

Score: 3.28

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI

MITREへのリンク →

Gamaredon Group

Score: 4.67

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1546.017 - Udev Rules

MITREへのリンク →

Winter Vivern

Score: 3.28

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI

MITREへのリンク →

CURIUM

Score: 3.28

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1059.012 - Hypervisor CLI

MITREへのリンク →

menuPass

Score: 3.17

Matched TTPs:

T1098.007 - Additional Local or Domain Groups
T1622 - Debugger Evasion

MITREへのリンク →

SideCopy

Score: 7.42

Matched TTPs:

T1584.002 - DNS Server
T1053.002 - At

MITREへのリンク →

Volt Typhoon

Score: 5.78

Matched TTPs:

T1584.002 - DNS Server
T1622 - Debugger Evasion

MITREへのリンク →

LAPSUS$

Score: 4.13

Matched TTPs:

T1557.002 - ARP Cache Poisoning

MITREへのリンク →

Stealth Falcon

Score: 3.62

Matched TTPs:

T1556.009 - Conditional Access Policies

MITREへのリンク →

Turla

Score: 8.05

Matched TTPs:

T1556.009 - Conditional Access Policies
T1059.012 - Hypervisor CLI
T1490 - Inhibit System Recovery

MITREへのリンク →

Wizard Spider

Score: 5.27

Matched TTPs:

T1556.009 - Conditional Access Policies
T1622 - Debugger Evasion

MITREへのリンク →

Axiom

Score: 3.41

Matched TTPs:

T1059.012 - Hypervisor CLI
T1622 - Debugger Evasion

MITREへのリンク →

Patchwork

Score: 3.41

Matched TTPs:

T1059.012 - Hypervisor CLI
T1622 - Debugger Evasion

MITREへのリンク →

Mustard Tempest

Score: 5.05

Matched TTPs:

T1059.012 - Hypervisor CLI
T1053.002 - At

MITREへのリンク →

PROMETHIUM

Score: 4.43

Matched TTPs:

T1059.012 - Hypervisor CLI
T1490 - Inhibit System Recovery

MITREへのリンク →

FIN10

Score: 4.31

Matched TTPs:

T1622 - Debugger Evasion
T1490 - Inhibit System Recovery

MITREへのリンク →

Medusa Group

Score: 6.19

Matched TTPs:

T1622 - Debugger Evasion
T1094 - Custom Command and Control Protocol

MITREへのリンク →

Molerats

Score: 3.15

Matched TTPs:

T1546.017 - Udev Rules

MITREへのリンク →

Higaisa

Score: 3.15

Matched TTPs:

T1546.017 - Udev Rules

MITREへのリンク →

Mofang

Score: 3.15

Matched TTPs:

T1546.017 - Udev Rules

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.79

Matched TTPs:

T1053.002 - At
T1098.007 - Additional Local or Domain Groups
T1622 - Debugger Evasion
T1490 - Inhibit System Recovery
T1003.003 - NTDS

MITREへのリンク →

Scattered Spider

Score: 0.71

Matched TTPs:

T1622 - Debugger Evasion
T1027.002 - Software Packing
T1098.007 - Additional Local or Domain Groups
T1557.002 - ARP Cache Poisoning

MITREへのリンク →

OilRig

Score: 0.65

Matched TTPs:

T1622 - Debugger Evasion
T1005 - Data from Local System
T1556.009 - Conditional Access Policies
T1098.007 - Additional Local or Domain Groups

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る