JAR-16-20296A IOCs - DOMAINs, HOSTNAMES, URLs, FQDNs, HASHES ONLY
概要
ONLY URLS, DOMAIN, HOSTNAMES, FQDNs, HASHES from:
JAR-16-20296A-
TLP: WHITE
Department of Homeland Security
NCCIC US-CERT
Reference Number: JAR-16-20296A
Notification:
This Indicator Bulletin is provided "as is" for informational purposes only. The
Department of Homeland Security (DHS) does not provide any warranties of any
kind regarding any information contained within. The DHS does not endorse any
commercial product or service, referenced in this bulletin or otherwise. This
document is marked TLP: WHITE. Recipients may share TLP: WHITE information
without restriction, but is subject to copyright controls. For more information
on the Traffic Light Protocol, see http://www.us-cert.gov/tlp.
Created: 2026-02-23
Indicators
Indicatorsは見つかっていない。
類似Pulses
このPulseに関連する脅威アクター (事実ベース)
Score: 19.98
Matched TTPs:
- T1148 - HISTCONTROL
- T1164 - Re-opened Applications
- T1057 - Process Discovery
- T1552.008 - Chat Messages
- T1199 - Trusted Relationship
- T1569.002 - Service Execution
MITREへのリンク →
Score: 3.84
Matched TTPs:
- T1171 - LLMNR/NBT-NS Poisoning and Relay
MITREへのリンク →
Score: 19.75
Matched TTPs:
- T1171 - LLMNR/NBT-NS Poisoning and Relay
- T1098.007 - Additional Local or Domain Groups
- T1588.001 - Malware
- T1199 - Trusted Relationship
- T1578.002 - Create Cloud Instance
- T1098.002 - Additional Email Delegate Permissions
- T1053.002 - At
MITREへのリンク →
Score: 7.69
Matched TTPs:
- T1171 - LLMNR/NBT-NS Poisoning and Relay
- T1552.008 - Chat Messages
MITREへのリンク →
Score: 15.68
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1057 - Process Discovery
- T1199 - Trusted Relationship
- T1200 - Hardware Additions
- T1668 - Exclusive Control
- T1566.003 - Spearphishing via Service
MITREへのリンク →
Score: 5.99
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1199 - Trusted Relationship
- T1578.002 - Create Cloud Instance
MITREへのリンク →
Score: 8.96
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1562.010 - Downgrade Attack
- T1199 - Trusted Relationship
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 8.40
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1199 - Trusted Relationship
- T1668 - Exclusive Control
- T1053.002 - At
MITREへのリンク →
Score: 12.35
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1588.001 - Malware
- T1199 - Trusted Relationship
- T1668 - Exclusive Control
- T1027.007 - Dynamic API Resolution
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 17.06
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1588.001 - Malware
- T1057 - Process Discovery
- T1199 - Trusted Relationship
- T1668 - Exclusive Control
- T1008 - Fallback Channels
- T1053.002 - At
MITREへのリンク →
Score: 6.50
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1199 - Trusted Relationship
- T1557.002 - ARP Cache Poisoning
MITREへのリンク →
Score: 9.14
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1199 - Trusted Relationship
- T1578.002 - Create Cloud Instance
- T1200 - Hardware Additions
MITREへのリンク →
Score: 4.80
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1053.002 - At
MITREへのリンク →
Score: 3.61
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1588.001 - Malware
MITREへのリンク →
Score: 9.65
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1199 - Trusted Relationship
- T1592.002 - Software
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 9.25
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1199 - Trusted Relationship
- T1055.005 - Thread Local Storage
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 17.55
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1588.001 - Malware
- T1057 - Process Discovery
- T1199 - Trusted Relationship
- T1055.005 - Thread Local Storage
- T1569.002 - Service Execution
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 10.15
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1588.001 - Malware
- T1057 - Process Discovery
- T1199 - Trusted Relationship
- T1027.007 - Dynamic API Resolution
MITREへのリンク →
Score: 4.76
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1199 - Trusted Relationship
- T1027.007 - Dynamic API Resolution
MITREへのリンク →
Score: 13.90
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1562.010 - Downgrade Attack
- T1199 - Trusted Relationship
- T1061 - Graphical User Interface
- T1200 - Hardware Additions
MITREへのリンク →
Score: 3.61
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1588.001 - Malware
MITREへのリンク →
Score: 7.20
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1057 - Process Discovery
- T1027.007 - Dynamic API Resolution
MITREへのリンク →
Score: 4.46
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1588.001 - Malware
- T1199 - Trusted Relationship
MITREへのリンク →
Score: 6.90
Matched TTPs:
- T1098.007 - Additional Local or Domain Groups
- T1199 - Trusted Relationship
- T1111 - Multi-Factor Authentication Interception
MITREへのリンク →
Score: 5.69
Matched TTPs:
- T1588.001 - Malware
- T1199 - Trusted Relationship
- T1668 - Exclusive Control
MITREへのリンク →
Score: 8.62
Matched TTPs:
- T1588.001 - Malware
- T1199 - Trusted Relationship
- T1668 - Exclusive Control
- T1569.002 - Service Execution
MITREへのリンク →
Score: 10.83
Matched TTPs:
- T1588.001 - Malware
- T1199 - Trusted Relationship
- T1668 - Exclusive Control
- T1027.007 - Dynamic API Resolution
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 8.09
Matched TTPs:
- T1588.001 - Malware
- T1199 - Trusted Relationship
- T1027.007 - Dynamic API Resolution
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 5.02
Matched TTPs:
- T1588.001 - Malware
- T1569.002 - Service Execution
MITREへのリンク →
Score: 11.37
Matched TTPs:
- T1588.001 - Malware
- T1199 - Trusted Relationship
- T1668 - Exclusive Control
- T1027.007 - Dynamic API Resolution
- T1008 - Fallback Channels
MITREへのリンク →
Score: 6.24
Matched TTPs:
- T1562.010 - Downgrade Attack
- T1027.007 - Dynamic API Resolution
MITREへのリンク →
Score: 3.84
Matched TTPs:
- T1552.008 - Chat Messages
MITREへのリンク →
Score: 3.78
Matched TTPs:
- T1199 - Trusted Relationship
- T1569.002 - Service Execution
MITREへのリンク →
Score: 4.00
Matched TTPs:
- T1199 - Trusted Relationship
- T1200 - Hardware Additions
MITREへのリンク →
Score: 4.98
Matched TTPs:
- T1199 - Trusted Relationship
- T1557.002 - ARP Cache Poisoning
MITREへのリンク →
Score: 5.39
Matched TTPs:
- T1199 - Trusted Relationship
- T1218.009 - Regsvcs/Regasm
MITREへのリンク →
Score: 3.25
Matched TTPs:
- T1199 - Trusted Relationship
- T1027.007 - Dynamic API Resolution
MITREへのリンク →
Score: 4.13
Matched TTPs:
- T1199 - Trusted Relationship
- T1008 - Fallback Channels
MITREへのリンク →
Score: 3.60
Matched TTPs:
- T1199 - Trusted Relationship
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 6.18
Matched TTPs:
- T1199 - Trusted Relationship
- T1027.007 - Dynamic API Resolution
- T1569.002 - Service Execution
MITREへのリンク →
Score: 3.60
Matched TTPs:
- T1199 - Trusted Relationship
- T1668 - Exclusive Control
MITREへのリンク →
Score: 4.13
Matched TTPs:
- T1199 - Trusted Relationship
- T1008 - Fallback Channels
MITREへのリンク →
Score: 3.25
Matched TTPs:
- T1199 - Trusted Relationship
- T1027.007 - Dynamic API Resolution
MITREへのリンク →
Score: 3.60
Matched TTPs:
- T1199 - Trusted Relationship
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 3.78
Matched TTPs:
- T1199 - Trusted Relationship
- T1569.002 - Service Execution
MITREへのリンク →
Score: 3.25
Matched TTPs:
- T1199 - Trusted Relationship
- T1027.007 - Dynamic API Resolution
MITREへのリンク →
Score: 3.60
Matched TTPs:
- T1199 - Trusted Relationship
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 3.25
Matched TTPs:
- T1199 - Trusted Relationship
- T1027.007 - Dynamic API Resolution
MITREへのリンク →
Score: 5.99
Matched TTPs:
- T1199 - Trusted Relationship
- T1668 - Exclusive Control
- T1027.007 - Dynamic API Resolution
MITREへのリンク →
Score: 3.60
Matched TTPs:
- T1199 - Trusted Relationship
- T1556 - Modify Authentication Process
MITREへのリンク →
Score: 3.25
Matched TTPs:
- T1199 - Trusted Relationship
- T1027.007 - Dynamic API Resolution
MITREへのリンク →
Score: 4.00
Matched TTPs:
- T1199 - Trusted Relationship
- T1200 - Hardware Additions
MITREへのリンク →
Score: 3.62
Matched TTPs:
- T1578.002 - Create Cloud Instance
MITREへのリンク →
Score: 3.15
Matched TTPs:
- T1200 - Hardware Additions
MITREへのリンク →
Score: 3.15
Matched TTPs:
- T1200 - Hardware Additions
MITREへのリンク →
Score: 4.13
Matched TTPs:
- T1130 - Install Root Certificate
MITREへのリンク →
Score: 7.06
Matched TTPs:
- T1130 - Install Root Certificate
- T1569.002 - Service Execution
MITREへのリンク →
Score: 9.46
Matched TTPs:
- T1027.007 - Dynamic API Resolution
- T1569.002 - Service Execution
- T1566.003 - Spearphishing via Service
MITREへのリンク →
Score: 3.29
Matched TTPs:
- T1008 - Fallback Channels
MITREへのリンク →
Score: 3.29
Matched TTPs:
- T1008 - Fallback Channels
MITREへのリンク →
このPulseに関連する脅威アクター (推論ベース)
Score: 0.78
Matched TTPs:
- T1199 - Trusted Relationship
- T1148 - HISTCONTROL
- T1569.002 - Service Execution
- T1552.008 - Chat Messages
- T1057 - Process Discovery
- T1164 - Re-opened Applications
MITREへのリンク →
Score: 0.77
Matched TTPs:
- T1098.002 - Additional Email Delegate Permissions
- T1199 - Trusted Relationship
- T1171 - LLMNR/NBT-NS Poisoning and Relay
- T1588.001 - Malware
- T1053.002 - At
- T1578.002 - Create Cloud Instance
- T1098.007 - Additional Local or Domain Groups
MITREへのリンク →
Score: 0.69
Matched TTPs:
- T1199 - Trusted Relationship
- T1569.002 - Service Execution
- T1556 - Modify Authentication Process
- T1588.001 - Malware
- T1057 - Process Discovery
- T1098.007 - Additional Local or Domain Groups
- T1055.005 - Thread Local Storage
MITREへのリンク →
Score: 0.66
Matched TTPs:
- T1199 - Trusted Relationship
- T1588.001 - Malware
- T1053.002 - At
- T1057 - Process Discovery
- T1668 - Exclusive Control
- T1098.007 - Additional Local or Domain Groups
- T1008 - Fallback Channels
MITREへのリンク →
Score: 0.63
Matched TTPs:
- T1566.003 - Spearphishing via Service
- T1199 - Trusted Relationship
- T1200 - Hardware Additions
- T1057 - Process Discovery
- T1668 - Exclusive Control
- T1098.007 - Additional Local or Domain Groups
MITREへのリンク →
Related CVEs
このPulseに見つかったCVEはありません。
Pulse – 脅威アクター グラフ
← Pulse一覧に戻る