216.73.217.22

Trifaux

AlienVault · Published 21/12/2025 05:32 · Modified 21/12/2025 05:32

Essential information

Confidence
100/100
Is family
No
Published
21/12/2025 05:32
Modified
21/12/2025 05:32
Revoked
No
Author / Source
AlienVault
Related entities
21 attack patterns (mitre), 1 intrusion sets (apt), 8 sectors, 60 indicators, 1 reports

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.

Attack patterns (MITRE) (21)

  • T1021 uses
    Remote Services
  • T1083 uses
    File and Directory Discovery
  • T1595 uses
    Active Scanning
  • T1592 uses
    Gather Victim Host Information
  • T1587.001 uses
    Malware
  • T1003 uses
    OS Credential Dumping
  • T1039 uses
    Data from Network Shared Drive
  • T1059 uses
    Command and Scripting Interpreter
  • T1591 uses
    Gather Victim Org Information
  • T1048 uses
    Exfiltration Over Alternative Protocol
  • T1567 uses
    Exfiltration Over Web Service
  • Exploits uses
    T1587.004
  • T1572 uses
    Protocol Tunneling
  • T1071 uses
    Application Layer Protocol
  • T1087 uses
    Account Discovery
  • T1027 uses
    Obfuscated Files or Information
  • T1190 uses
    Exploit Public-Facing Application
  • T1560 uses
    Archive Collected Data
  • T1090 uses
    Proxy
  • T1021.002 uses
    SMB/Windows Admin Shares
  • Search Open Technical Databases uses
    T1596

Intrusion sets (APT) (1)

  • Andariel uses Silent ChollimaPLUTONIUM
    The MITRE Corporation Confidence 100

    [Andariel](https://attack.mitre.org/groups/G0138) is a North Korean state-sponsored threat group that has been active since at least 2009. [Andariel](https://attack.mitre.org/groups/G0138) has primarily focused its operations--which have included destructive attacks--against South Korean …

    First seen 01/01/1970 · Last seen 16/11/5138 Published 16/12/2025 19:39 · Modified 27/03/2026 01:13

Sectors (8)

  • Defense targets
  • Aerospace targets
  • Government targets
  • Manufacturing targets
  • Healthcare targets
  • Nuclear power (civilian use) targets
  • Engineering consulting targets
  • Energy targets

Indicators (60)

Reports (1)