侵入の痕跡（Indicators of Compromise, IoC）

ファイルハッシュ（SHA1）

トレンドマイクロ検出名

000a020cb8e6555076d7fa215ad612b54e27b606

Trojan.W97M.EMOTET.UAJS

008eec22245b587c75b08afbdadc7d6cd8e97004
02d2f19a2b7d9eb37f82c7be0508e6fcf79bcda3
03e3b74796a8867abee4dac851a88018aec0ae81
12c1322d2312f5b910f076d1517ba5b9f4e1cd21
181874b2cf25d02437649adf0bb9a6a20ebecfbe
1bb9c0b6be3bdcdf05117efecb45f20811051057
22c88572c5bcd8359b485b2d344cbf4270243d8b267be9f695ef29fff1f2628630d0bd3d989fcaab
40859fa0c11fe4709148299dd6375f0a558e3433
474714af8d0e570647b57a9d8b817455cd67cf86
4c44a6c93f9be1d2ce16cdabcd29f11a08c15129
51cad2eccf84cd1ed979e53a53dfe0ceb0a15e93
5a925458270a6acaa585e27f023a3591dd83ce4d5eb321863802f56f8bfc279c81d1d0052953742b
75586f87f60741b0eb2eb460f1ff1c4fa28cd41a7969e833dd7aa9bdcb7493a6bd50f11b63d07739

もしくはDownloader.VBA.TRX.XXVBAF01FF009（機械学習型検索）80e6760909eb9548e039b4dd0abf372f1bf99fb2
879c76b04cdbfe2ea68620522d5ac812b7ebfcbe
886076527275c2d15753aaea472667f9f933e984
89f09bf133de9e40a91b186a086232b671f5f56e
8a097b60bf1235ec622ef7b2ccab242f96246d97
8fe95b3b67e12752c6f92c71882c5e400e554232
8feeb98bbe3c3593dade649ecc12b170fb3137d4
96769087a0ea377f7366995c3efaf0c0773ace39
9b186ccfc2222d5b0ce761fc38f500ccb8c804bd
9f68318254c1024d69b36d0410f9139adb6b4993
a399467705c2307502e0de077f9ca9dedb2915b7
aa35ccee34a347b261dd998fd8bdd3ae658eb64b
ac61112ca563c99263d1b90987496567225da05db0320cde3a3023c06dee865248f2ebe9a12b199e
b4a2477a3d89225594e01747da3e41fece5373e6
bd5a693507f673ccea3ab65253f23d3647aef908
c6df83c2553e76b4fee6ea51806568bba9d354a5
c86a92273418ef47218ccb4d0d01ad4d0ba965cd
d5d5def5f8f77d966dd3b55da609fbaf0158bbaa
d61f9f59ea81d7441c38815819299d63b8eac456
d91826c68c17915e715ec84343ebf24815e73347

Appendix • The Proactive Approach to Securing the Network from Targeted Attacks

e051f92e806a364fe6f1d3063d4bc7d76e9690ef
e1934a7b939b2e99528d3ff02e091ac199b0446b
eca8a6265e15dbdeb73c8e684cde860e5643bf28
ef9e6ad24827bb82e7a95588864a13cb03fd66a5
fb47a8937b20e5ccbc48f347a24afe084e7afa86
fce86fb91bbc8de588c8b6ac059312f4bc717486■関連するURL︓
hxxp://datacentertecnologia[.]com[.]br/model/ULr/
hxxp://oli-materlik[.]de/live/wjeos17/
hxxp://picturebymucha[.]de/Galerie/vo2uc9o42182780/
hxxp://stefan-els[.]de/cgi-bin/attach/GxmkA/
hxxp://simplyorange[.]de/_offset/AICNxQKBJmdw/
hxxps://smarteksystems[.]ca/firstgulfretail.com/attach/KgiKS/
hxxp://spora-kies[.]de/___backup/4c671x1sqjbux01284753/

Appendix • The Proactive Approach to Securing the Network from Targeted Attacks

TREND MICRO ™ RESEARCH
Trend Micro, a global leader in cybersecurity, helps to make the world safe for exchanging digital information.
Our innovative solutions provide our customers with layered security for data centers, cloud workloads,networks, and endpoints.
At the heart of our leadership, Trend Micro Research is powered by experts who are passionate about
discovering new threats, sharing key insights with the public, and supporting efforts to stop cybercriminals.
Our global team helps identify millions of threats daily, leads the industry in vulnerability disclosures, andpublishes innovative research on targeted attacks, artificial intelligence, Internet of Things (IoT),
cybercriminals, and more. We continually work to anticipate the next wave of threats and deliver thoughtprovoking research that can shape strategic industry direction.
www.trendmicro.com

Appendix • The Proactive Approach to Securing the Network from Targeted Attacks