Trusted Design

Trojan Emotet

概要

Trojan Emotet || Loaded through an infected document that set up a shell connection and downloaded a primary (Trojan.Emotet) and secondary Trojan || Searches for Windows Mail specific files Tries to harvest and steal browser information (history, passwords, etc) Tries to steal Instant Messenger accounts or passwords Tries to steal Mail credentials (via file access) Tries to steal Mail credentials (via file registry) May use bcdedit to modify the Windows boot settings Drops executables to the windows directory (C:\Windows) and starts them

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Emotet Trojan Acts as Loader, Spreads Automatically (score: 0.75)
Emotet (score: 0.69)
HackTool:Win32/MailLogger (score: 0.66)
Trojan:Win32/Trept (score: 0.66)
TrojanDropper:Win32/Lukicsel (score: 0.66)

このPulseに関連する脅威アクター (事実ベース)

Scattered Spider

Score: 10.79

Matched TTPs:

T1564.008 - Email Hiding Rules
T1657 - Financial Theft
T1562.001 - Disable or Modify Tools
T1003.003 - NTDS

MITREへのリンク →

FIN4

Score: 7.24

Matched TTPs:

T1564.008 - Email Hiding Rules
T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment

MITREへのリンク →

Malteiro

Score: 4.19

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1657 - Financial Theft

MITREへのリンク →

APT12

Score: 3.16

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution

MITREへのリンク →

Kimsuky

Score: 20.52

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1657 - Financial Theft
T1566 - Phishing
T1562.001 - Disable or Modify Tools
T1027.002 - Software Packing
T1588.003 - Code Signing Certificates
T1078.003 - Local Accounts

MITREへのリンク →

Machete

Score: 8.16

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1218.007 - Msiexec
T1189 - Drive-by Compromise

MITREへのリンク →

Elderwood

Score: 8.42

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1027.002 - Software Packing

MITREへのリンク →

Transparent Tribe

Score: 6.37

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise

MITREへのリンク →

Dragonfly

Score: 16.96

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1195.002 - Compromise Software Supply Chain
T1203 - Exploitation for Client Execution
T1036.010 - Masquerade Account Name
T1189 - Drive-by Compromise
T1221 - Template Injection
T1003.003 - NTDS

MITREへのリンク →

Contagious Interview

Score: 9.65

Matched TTPs:

T1204.002 - Malicious File
T1657 - Financial Theft
T1562.001 - Disable or Modify Tools
T1204.004 - Malicious Copy and Paste

MITREへのリンク →

RTM

Score: 3.43

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1189 - Drive-by Compromise

MITREへのリンク →

Aoqin Dragon

Score: 4.33

Matched TTPs:

T1204.002 - Malicious File
T1203 - Exploitation for Client Execution
T1027.002 - Software Packing

MITREへのリンク →

CURIUM

Score: 3.43

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1189 - Drive-by Compromise

MITREへのリンク →

Tropic Trooper

Score: 14.75

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.001 - Spearphishing Attachment
T1547.004 - Winlogon Helper DLL
T1203 - Exploitation for Client Execution
T1221 - Template Injection
T1078.003 - Local Accounts

MITREへのリンク →

Dark Caracal

Score: 4.61

Matched TTPs:

T1204.002 - Malicious File
T1189 - Drive-by Compromise
T1027.002 - Software Packing

MITREへのリンク →

RedCurl

Score: 3.11

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment

MITREへのリンク →

DarkHydrus

Score: 4.81

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1221 - Template Injection

MITREへのリンク →

PLATINUM

Score: 7.97

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1189 - Drive-by Compromise
T1056.004 - Credential API Hooking

MITREへのリンク →

menuPass

Score: 4.00

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1003.003 - NTDS

MITREへのリンク →

FIN8

Score: 6.26

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1588.003 - Code Signing Certificates

MITREへのリンク →

Threat Group-3390

Score: 18.14

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.001 - Spearphishing Attachment
T1195.002 - Compromise Software Supply Chain
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1027.002 - Software Packing
T1588.003 - Code Signing Certificates
T1027.015 - Compression

MITREへのリンク →

BITTER

Score: 3.16

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution

MITREへのリンク →

APT37

Score: 4.92

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise

MITREへのリンク →

LazyScripter

Score: 3.11

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment

MITREへのリンク →

PROMETHIUM

Score: 7.16

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1189 - Drive-by Compromise
T1078.003 - Local Accounts

MITREへのリンク →

TA505

Score: 14.09

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1218.007 - Msiexec
T1553.005 - Mark-of-the-Web Bypass
T1562.001 - Disable or Modify Tools
T1027.002 - Software Packing

MITREへのリンク →

APT39

Score: 9.70

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1059.010 - AutoHotKey & AutoIT
T1027.002 - Software Packing

MITREへのリンク →

Higaisa

Score: 6.31

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1027.015 - Compression

MITREへのリンク →

Rancor

Score: 4.95

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1218.007 - Msiexec

MITREへのリンク →

Wizard Spider

Score: 19.80

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1547.004 - Winlogon Helper DLL
T1562.001 - Disable or Modify Tools
T1555.004 - Windows Credential Manager
T1588.003 - Code Signing Certificates
T1003.003 - NTDS

MITREへのリンク →

OilRig

Score: 17.85

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1137.004 - Outlook Home Page
T1555.004 - Windows Credential Manager
T1588.003 - Code Signing Certificates

MITREへのリンク →

Sandworm Team

Score: 9.87

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1195.002 - Compromise Software Supply Chain
T1203 - Exploitation for Client Execution
T1003.003 - NTDS

MITREへのリンク →

Magic Hound

Score: 13.55

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1562 - Impair Defenses
T1562.001 - Disable or Modify Tools
T1036.010 - Masquerade Account Name
T1189 - Drive-by Compromise

MITREへのリンク →

Cobalt Group

Score: 13.60

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1218.003 - CMSTP
T1195.002 - Compromise Software Supply Chain
T1203 - Exploitation for Client Execution

MITREへのリンク →

Storm-1811

Score: 5.86

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1036.010 - Masquerade Account Name

MITREへのリンク →

Inception

Score: 6.31

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1221 - Template Injection

MITREへのリンク →

EXOTIC LILY

Score: 4.60

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution

MITREへのリンク →

Saint Bear

Score: 7.01

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1562.001 - Disable or Modify Tools
T1203 - Exploitation for Client Execution
T1027.002 - Software Packing

MITREへのリンク →

Lazarus Group

Score: 10.10

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1562.001 - Disable or Modify Tools
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise

MITREへのリンク →

FIN6

Score: 5.80

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1562.001 - Disable or Modify Tools
T1003.003 - NTDS

MITREへのリンク →

Patchwork

Score: 8.42

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1027.002 - Software Packing

MITREへのリンク →

TA459

Score: 3.16

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution

MITREへのリンク →

FIN7

Score: 15.18

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1674 - Input Injection
T1195.002 - Compromise Software Supply Chain
T1078.003 - Local Accounts

MITREへのリンク →

Moonstone Sleet

Score: 4.59

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1195.002 - Compromise Software Supply Chain

MITREへのリンク →

APT28

Score: 19.49

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1221 - Template Injection
T1137.002 - Office Test
T1003.003 - NTDS
T1669 - Wi-Fi Networks

MITREへのリンク →

Gorgon Group

Score: 3.46

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1562.001 - Disable or Modify Tools

MITREへのリンク →

APT19

Score: 5.36

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.001 - Spearphishing Attachment
T1189 - Drive-by Compromise

MITREへのリンク →

TA2541

Score: 10.11

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1562.001 - Disable or Modify Tools
T1027.002 - Software Packing
T1027.015 - Compression

MITREへのリンク →

Earth Lusca

Score: 5.94

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise

MITREへのリンク →

Mofang

Score: 6.26

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1027.015 - Compression

MITREへのリンク →

Leviathan

Score: 9.52

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1027.015 - Compression

MITREへのリンク →

Tonto Team

Score: 3.16

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution

MITREへのリンク →

Andariel

Score: 4.92

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise

MITREへのリンク →

BRONZE BUTLER

Score: 6.72

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1562.001 - Disable or Modify Tools
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise

MITREへのリンク →

APT38

Score: 16.34

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.001 - Spearphishing Attachment
T1218.007 - Msiexec
T1553.005 - Mark-of-the-Web Bypass
T1562.001 - Disable or Modify Tools
T1189 - Drive-by Compromise
T1027.002 - Software Packing

MITREへのリンク →

MuddyWater

Score: 14.15

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1218.003 - CMSTP
T1562.001 - Disable or Modify Tools
T1203 - Exploitation for Client Execution
T1027.004 - Compile After Delivery

MITREへのリンク →

Mustang Panda

Score: 10.10

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1588.003 - Code Signing Certificates
T1003.003 - NTDS

MITREへのリンク →

Molerats

Score: 9.55

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1218.007 - Msiexec
T1027.015 - Compression

MITREへのリンク →

admin@338

Score: 3.16

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution

MITREへのリンク →

Gamaredon Group

Score: 13.38

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1562.001 - Disable or Modify Tools
T1027.004 - Compile After Delivery
T1221 - Template Injection
T1027.015 - Compression

MITREへのリンク →

Darkhotel

Score: 4.92

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise

MITREへのリンク →

APT32

Score: 10.97

Matched TTPs:

T1204.002 - Malicious File
T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise
T1078.003 - Local Accounts

MITREへのリンク →

The White Company

Score: 5.21

Matched TTPs:

T1204.002 - Malicious File
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1027.002 - Software Packing

MITREへのリンク →

APT33

Score: 4.60

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution

MITREへのリンク →

Sidewinder

Score: 4.60

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution

MITREへのリンク →

APT29

Score: 16.45

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1546.008 - Accessibility Features
T1553.005 - Mark-of-the-Web Bypass
T1203 - Exploitation for Client Execution
T1027.002 - Software Packing
T1078.003 - Local Accounts

MITREへのリンク →

Confucius

Score: 7.75

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1221 - Template Injection

MITREへのリンク →

BlackTech

Score: 7.75

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1203 - Exploitation for Client Execution
T1588.003 - Code Signing Certificates

MITREへのリンク →

Windshift

Score: 4.88

Matched TTPs:

T1204.002 - Malicious File
T1566.002 - Spearphishing Link
T1566.001 - Spearphishing Attachment
T1189 - Drive-by Compromise

MITREへのリンク →

Medusa Group

Score: 15.19

Matched TTPs:

T1543.003 - Windows Service
T1657 - Financial Theft
T1562.001 - Disable or Modify Tools
T1027.002 - Software Packing
T1003.003 - NTDS
T1218.014 - MMC

MITREへのリンク →

Aquatic Panda

Score: 3.73

Matched TTPs:

T1543.003 - Windows Service
T1562.001 - Disable or Modify Tools

MITREへのリンク →

APT41

Score: 14.91

Matched TTPs:

T1543.003 - Windows Service
T1566.001 - Spearphishing Attachment
T1546.008 - Accessibility Features
T1195.002 - Compromise Software Supply Chain
T1203 - Exploitation for Client Execution
T1027.002 - Software Packing
T1003.003 - NTDS

MITREへのリンク →

TeamTNT

Score: 5.79

Matched TTPs:

T1543.003 - Windows Service
T1562.001 - Disable or Modify Tools
T1027.002 - Software Packing

MITREへのリンク →

BlackByte

Score: 7.86

Matched TTPs:

T1543.003 - Windows Service
T1562 - Impair Defenses
T1562.001 - Disable or Modify Tools

MITREへのリンク →

Ke3chang

Score: 4.28

Matched TTPs:

T1543.003 - Windows Service
T1003.003 - NTDS

MITREへのリンク →

APT3

Score: 13.84

Matched TTPs:

T1543.003 - Windows Service
T1566.002 - Spearphishing Link
T1546.008 - Accessibility Features
T1203 - Exploitation for Client Execution
T1036.010 - Masquerade Account Name
T1027.002 - Software Packing

MITREへのリンク →

Agrius

Score: 3.73

Matched TTPs:

T1543.003 - Windows Service
T1562.001 - Disable or Modify Tools

MITREへのリンク →

Cinnamon Tempest

Score: 4.46

Matched TTPs:

T1543.003 - Windows Service
T1657 - Financial Theft

MITREへのリンク →

Mustard Tempest

Score: 7.75

Matched TTPs:

T1566.002 - Spearphishing Link
T1189 - Drive-by Compromise
T1608.006 - SEO Poisoning

MITREへのリンク →

ZIRCONIUM

Score: 6.79

Matched TTPs:

T1566.002 - Spearphishing Link
T1218.007 - Msiexec
T1027.002 - Software Packing

MITREへのリンク →

Turla

Score: 15.14

Matched TTPs:

T1566.002 - Spearphishing Link
T1547.004 - Winlogon Helper DLL
T1562.001 - Disable or Modify Tools
T1555.004 - Windows Credential Manager
T1189 - Drive-by Compromise
T1078.003 - Local Accounts

MITREへのリンク →

Deep Panda

Score: 3.29

Matched TTPs:

T1546.008 - Accessibility Features

MITREへのリンク →

Axiom

Score: 9.83

Matched TTPs:

T1546.008 - Accessibility Features
T1566 - Phishing
T1203 - Exploitation for Client Execution
T1189 - Drive-by Compromise

MITREへのリンク →

Fox Kitten

Score: 5.63

Matched TTPs:

T1546.008 - Accessibility Features
T1003.003 - NTDS

MITREへのリンク →

INC Ransom

Score: 7.61

Matched TTPs:

T1657 - Financial Theft
T1566 - Phishing
T1562.001 - Disable or Modify Tools

MITREへのリンク →

FIN13

Score: 4.86

Matched TTPs:

T1657 - Financial Theft
T1003.003 - NTDS

MITREへのリンク →

Storm-0501

Score: 4.58

Matched TTPs:

T1657 - Financial Theft
T1027.002 - Software Packing

MITREへのリンク →

AppleJeus

Score: 5.81

Matched TTPs:

T1657 - Financial Theft
T1566 - Phishing

MITREへのリンク →

Akira

Score: 4.32

Matched TTPs:

T1657 - Financial Theft
T1562.001 - Disable or Modify Tools

MITREへのリンク →

Play

Score: 6.99

Matched TTPs:

T1657 - Financial Theft
T1562.001 - Disable or Modify Tools
T1078.003 - Local Accounts

MITREへのリンク →

Sea Turtle

Score: 11.07

Matched TTPs:

T1566 - Phishing
T1203 - Exploitation for Client Execution
T1027.004 - Compile After Delivery
T1078.003 - Local Accounts

MITREへのリンク →

GOLD SOUTHFIELD

Score: 6.21

Matched TTPs:

T1566 - Phishing
T1195.002 - Compromise Software Supply Chain

MITREへのリンク →

UNC3886

Score: 3.29

Matched TTPs:

T1562.001 - Disable or Modify Tools
T1203 - Exploitation for Client Execution

MITREへのリンク →

Velvet Ant

Score: 4.46

Matched TTPs:

T1562.001 - Disable or Modify Tools
T1078.003 - Local Accounts

MITREへのリンク →

Ember Bear

Score: 3.29

Matched TTPs:

T1562.001 - Disable or Modify Tools
T1203 - Exploitation for Client Execution

MITREへのリンク →

Rocke

Score: 7.47

Matched TTPs:

T1562.001 - Disable or Modify Tools
T1027.004 - Compile After Delivery
T1027.002 - Software Packing

MITREへのリンク →

Daggerfly

Score: 4.69

Matched TTPs:

T1195.002 - Compromise Software Supply Chain
T1189 - Drive-by Compromise

MITREへのリンク →

Stealth Falcon

Score: 3.62

Matched TTPs:

T1555.004 - Windows Credential Manager

MITREへのリンク →

Volt Typhoon

Score: 4.39

Matched TTPs:

T1027.002 - Software Packing
T1003.003 - NTDS

MITREへのリンク →

HAFNIUM

Score: 5.01

Matched TTPs:

T1003.003 - NTDS
T1078.003 - Local Accounts

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

APT28

Score: 0.75

Matched TTPs:

T1203 - Exploitation for Client Execution
T1137.002 - Office Test
T1221 - Template Injection
T1566.001 - Spearphishing Attachment
T1003.003 - NTDS
T1204.002 - Malicious File
T1189 - Drive-by Compromise
T1669 - Wi-Fi Networks

MITREへのリンク →

Wizard Spider

Score: 0.75

Matched TTPs:

T1566.002 - Spearphishing Link
T1562.001 - Disable or Modify Tools
T1547.004 - Winlogon Helper DLL
T1588.003 - Code Signing Certificates
T1566.001 - Spearphishing Attachment
T1003.003 - NTDS
T1204.002 - Malicious File
T1555.004 - Windows Credential Manager
T1543.003 - Windows Service

MITREへのリンク →

Kimsuky

Score: 0.75

Matched TTPs:

T1657 - Financial Theft
T1566.002 - Spearphishing Link
T1027.002 - Software Packing
T1562.001 - Disable or Modify Tools
T1588.003 - Code Signing Certificates
T1078.003 - Local Accounts
T1566.001 - Spearphishing Attachment
T1204.002 - Malicious File
T1566 - Phishing
T1543.003 - Windows Service

MITREへのリンク →

Threat Group-3390

Score: 0.71

Matched TTPs:

T1203 - Exploitation for Client Execution
T1027.015 - Compression
T1027.002 - Software Packing
T1588.003 - Code Signing Certificates
T1566.001 - Spearphishing Attachment
T1204.002 - Malicious File
T1189 - Drive-by Compromise
T1195.002 - Compromise Software Supply Chain
T1543.003 - Windows Service

MITREへのリンク →

OilRig

Score: 0.65

Matched TTPs:

T1203 - Exploitation for Client Execution
T1566.002 - Spearphishing Link
T1588.003 - Code Signing Certificates
T1566.001 - Spearphishing Attachment
T1137.004 - Outlook Home Page
T1204.002 - Malicious File
T1555.004 - Windows Credential Manager
T1543.003 - Windows Service

MITREへのリンク →

Dragonfly

Score: 0.65

Matched TTPs:

T1203 - Exploitation for Client Execution
T1036.010 - Masquerade Account Name
T1221 - Template Injection
T1566.001 - Spearphishing Attachment
T1003.003 - NTDS
T1204.002 - Malicious File
T1189 - Drive-by Compromise
T1195.002 - Compromise Software Supply Chain

MITREへのリンク →

FIN7

Score: 0.62

Matched TTPs:

T1674 - Input Injection
T1566.002 - Spearphishing Link
T1078.003 - Local Accounts
T1566.001 - Spearphishing Attachment
T1204.002 - Malicious File
T1195.002 - Compromise Software Supply Chain
T1543.003 - Windows Service

MITREへのリンク →

APT29

Score: 0.62

Matched TTPs:

T1203 - Exploitation for Client Execution
T1566.002 - Spearphishing Link
T1027.002 - Software Packing
T1078.003 - Local Accounts
T1566.001 - Spearphishing Attachment
T1553.005 - Mark-of-the-Web Bypass
T1204.002 - Malicious File
T1546.008 - Accessibility Features

MITREへのリンク →

Turla

Score: 0.62

Matched TTPs:

T1566.002 - Spearphishing Link
T1562.001 - Disable or Modify Tools
T1547.004 - Winlogon Helper DLL
T1078.003 - Local Accounts
T1189 - Drive-by Compromise
T1555.004 - Windows Credential Manager

MITREへのリンク →

APT38

Score: 0.62

Matched TTPs:

T1027.002 - Software Packing
T1562.001 - Disable or Modify Tools
T1218.007 - Msiexec
T1566.001 - Spearphishing Attachment
T1553.005 - Mark-of-the-Web Bypass
T1204.002 - Malicious File
T1189 - Drive-by Compromise
T1543.003 - Windows Service

MITREへのリンク →

Medusa Group

Score: 0.60

Matched TTPs:

T1657 - Financial Theft
T1027.002 - Software Packing
T1562.001 - Disable or Modify Tools
T1218.014 - MMC
T1003.003 - NTDS
T1543.003 - Windows Service

MITREへのリンク →

APT41

Score: 0.58

Matched TTPs:

T1203 - Exploitation for Client Execution
T1543.003 - Windows Service
T1027.002 - Software Packing
T1566.001 - Spearphishing Attachment
T1003.003 - NTDS
T1195.002 - Compromise Software Supply Chain
T1546.008 - Accessibility Features

MITREへのリンク →

TA505

Score: 0.58

Matched TTPs:

T1566.002 - Spearphishing Link
T1027.002 - Software Packing
T1562.001 - Disable or Modify Tools
T1218.007 - Msiexec
T1566.001 - Spearphishing Attachment
T1553.005 - Mark-of-the-Web Bypass
T1204.002 - Malicious File

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る