216.73.217.22

APT45

· Published 21/12/2025 05:37 · Modified 21/12/2025 05:37 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 05:37
Modified
21/12/2025 05:37
Updated at
21/12/2025 05:37
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
1 reports, 16 attack patterns (mitre), 5 malware, 5 sectors, 3 countries, 37 indicators

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (1)

Attack patterns (MITRE) (16)

  • T1082 uses
    System Information Discovery
  • T1059 uses
    Command and Scripting Interpreter
  • T1213 uses
    Data from Information Repositories
  • T1047 uses
    Windows Management Instrumentation
  • T1498 uses
    Network Denial of Service
  • T1588 uses
    Obtain Capabilities
  • T1063 uses
  • T1195 uses
    Supply Chain Compromise
  • T1571 uses
    Non-Standard Port
  • T1485 uses
    Data Destruction
  • T1053 uses
    Scheduled Task/Job
  • T1567 uses
    Exfiltration Over Web Service
  • T1027 uses
    Obfuscated Files or Information
  • T1132 uses
    Data Encoding
  • T1018 uses
    Remote System Discovery
  • T1204 uses
    User Execution

Malware (5)

  • 3PROXY uses
    Family
    Published 26/07/2024 08:51 · Modified 26/07/2024 08:51
  • RIFLE uses
    Family
    Published 26/07/2024 08:51 · Modified 26/07/2024 08:51
  • ROGUEEYE uses
    Family
    Published 26/07/2024 08:51 · Modified 26/07/2024 08:51
  • SHATTEREDGLASS uses
    Family
    Published 26/07/2024 08:51 · Modified 26/07/2024 08:51
  • Maui Ransomware uses
    Family
    Published 26/07/2024 08:51 · Modified 26/07/2024 08:51

Sectors (5)

  • Finance targets
  • Agriculture targets
  • Healthcare targets
  • Defense targets
  • Government targets

Countries (3)

  • Korea, Republic of targets
  • India targets
  • Korea, Democratic People's Republic of targets

Indicators (37)