標的型攻撃の実態と 対策アプローチ
Common Information
| Type | Value |
|---|---|
| UUID | 1007deab-7946-46af-8e06-979860821ceb |
| Fingerprint | cec1bb921a5414b68af957e636f7597d17292fd2dd064909c7428391e990c2b3 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Oct. 21, 2019, 3:39 p.m. |
| Added to db | July 25, 2024, 12:28 p.m. |
| Last updated | Aug. 31, 2024, 9:08 a.m. |
| Headline | 標的型攻撃の実態と 対策アプローチ |
| Title | 標的型攻撃の実態と 対策アプローチ |
| Detected Hints/Tags/Attributes | 35/3/80 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 11 | media.kaspersky.com |
|
| Details | Domain | 71 | blogs.jpcert.or.jp |
|
| Details | Domain | 12 | www.macnica.net |
|
| Details | Domain | 20 | insight-jp.nttsecurity.com |
|
| Details | Domain | 2 | market.pwsmbx.com |
|
| Details | Domain | 4 | piyolog.hatenadiary.jp |
|
| Details | Domain | 2 | www.rips.or.jp |
|
| Details | Domain | 2 | think-japan.net |
|
| Details | Domain | 2 | rc4-decrypt.py |
|
| Details | Domain | 4127 | github.com |
|
| Details | Domain | 262 | www.welivesecurity.com |
|
| Details | Domain | 35 | blackhat.com |
|
| Details | Domain | 2 | appstore.androiddatacenter.com |
|
| Details | Domain | 2 | ddc.phonewebex.com |
|
| Details | File | 2 | kaspersky-wp-darkhotel-pr-1002.pdf |
|
| Details | File | 3 | tick-activity.html |
|
| Details | File | 3 | mpressioncss_ta_report_2019.pdf |
|
| Details | File | 3 | darkhotel_lnk.html |
|
| Details | File | 2 | around.php |
|
| Details | File | 2 | 北朝鮮非核化の行方と制裁の課題.docm |
|
| Details | File | 2 | sd.ps1 |
|
| Details | File | 3 | tscookie_loader.html |
|
| Details | File | 2 | flashlastest.exe |
|
| Details | File | 3 | last.exe |
|
| Details | File | 2 | 最初にflashlastest.exe |
|
| Details | File | 2 | delsettingdsufytgdsuyf.php |
|
| Details | File | 2 | 核化の行方と制裁の課題.docm |
|
| Details | File | 2 | doc1.bin |
|
| Details | File | 2 | est.exe |
|
| Details | File | 2 | flashtest.exe |
|
| Details | File | 2 | flashlatest.exe |
|
| Details | File | 2 | rc4-decrypt.py |
|
| Details | File | 8 | shell.dll |
|
| Details | File | 2 | mynewinjector_avria.dll |
|
| Details | File | 748 | kernel32.dll |
|
| Details | File | 33 | gdiplus.dll |
|
| Details | File | 2 | tscookie_data_decode.py |
|
| Details | File | 2 | top.ini |
|
| Details | File | 2 | dmxxxx.tmp |
|
| Details | File | 2 | dm.tmp |
|
| Details | File | 2 | 自身をavirra.exe |
|
| Details | File | 4 | pccnt.exe |
|
| Details | File | 2 | us-19-tsai-infiltrating-corporate-intranet-like-nsa.pdf |
|
| Details | File | 1204 | index.php |
|
| Details | Github username | 23 | jpcertcc |
|
| Details | sha256 | 3 | 337d610ebcc9c0834124f3215e0fe3da6d7efe5b14fa4d829d5fc698deca227d |
|
| Details | sha256 | 6 | 706a6833b4204a89455f14387dbfc4903d18134c4e37c184644df48009bc5419 |
|
| Details | sha256 | 2 | 04fec91f13ea96bc9a4446895d870a31991abd623288504b8c707d97905eaa8d |
|
| Details | sha256 | 5 | fb0d86dd4ed621b67dced1665b5db576247a10d43b40752c1236be783ac11049 |
|
| Details | sha256 | 3 | 32dbfc069a6871b2f6cc54484c86b21e2f13956e3666d08077afa97d410185d2 |
|
| Details | sha256 | 2 | b63dbd4edc8ef0cb4f8fc92546130b68e5275e6fc5fdef93f1646cf65cab3977 |
|
| Details | sha256 | 2 | d66cb043a9f3b4186ce5a1824d9a6071ee2956ccb0c9744387e5baaf0ac88d76 |
|
| Details | sha256 | 2 | 39d69518c17e03eb0908321b9b4932a8bbb0fe8b6e89c81422adade5cbb0efda |
|
| Details | sha256 | 2 | da6813f0ef85b0abc8df4df72ded43225704b179b575e210319e55f0432ec171 |
|
| Details | sha256 | 2 | f451c943be3ae1ac9c773484449696ea5629777b19b1ad66d334e0d5b8e8330a |
|
| Details | sha256 | 2 | f30b8f26ea4ee498b5e10471a0ba720e2c21210bc57440409533d6b072d95153 |
|
| Details | IPv4 | 2 | 37.220.0.41 |
|
| Details | Pdb | 2 | isyss.pdb |
|
| Details | Url | 2 | https://media.kaspersky.com/jp/pdf/pr/kaspersky-wp-darkhotel-pr-1002.pdf |
|
| Details | Url | 3 | https://blogs.jpcert.or.jp/ja/2019/02/tick-activity.html |
|
| Details | Url | 2 | https://blogs.jpcert.or.jp/ja/tags/blacktech |
|
| Details | Url | 2 | https://www.macnica.net/file/mpressioncss_ta_report_2019.pdf |
|
| Details | Url | 6 | https://insight-jp.nttsecurity.com/post/102fmlc/untitled |
|
| Details | Url | 3 | https://blogs.jpcert.or.jp/ja/2019/05/darkhotel_lnk.html |
|
| Details | Url | 2 | http://37.220.0.41/sd.ps1がダ |
|
| Details | Url | 3 | https://blogs.jpcert.or.jp/ja/2019/09/tscookie_loader.html |
|
| Details | Url | 2 | https://piyolog.hatenadiary.jp/entry/20180531/1527796712 |
|
| Details | Url | 2 | http://www.rips.or.jp/archives/1955 |
|
| Details | Url | 2 | http://think-japan.net/sys- |
|
| Details | Url | 2 | http://37.220.0.41 |
|
| Details | Url | 2 | http://37.220.0.41/doc1.binからファ |
|
| Details | Url | 2 | https://github.com/jpcertcc/aa-tools/blob/master/tscookie_data_decode.py |
|
| Details | Url | 2 | https://piyolog.hatenadiary.jp/entry/20180119/1516391079 |
|
| Details | Url | 5 | https://www.welivesecurity.com/2019/05/14/plead-malware-mitm-asus-webstorage |
|
| Details | Url | 2 | https://i.blackhat.com/usa-19/wednesday/us-19-tsai-infiltrating-corporate-intranet-like-nsa.pdf |
|
| Details | Url | 2 | http://37.220.0.41/sd.ps1 |
|
| Details | Url | 2 | http://37.220.0.41/doc1.bin |
|
| Details | Url | 2 | http://think-japan.net/system2/delsettingdsufytgdsuyf.php |
|
| Details | Url | 2 | http://ddc.phonewebex.com:443/index.php |
|
| Details | Windows Registry Key | 5 | HKEY_CURRENT_USER\Software\Microsoft\Win |