ANELLDR
Software · ATTACK:enterprise:S9027
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S9027",
"title": "ANELLDR",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S9027",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--c21edbd1-a0a4-4c3c-9b22-4a49634186c3",
"external_id": "S9027",
"domain": "enterprise",
"created": "2026-04-19T15:09:46.460Z",
"modified": "2026-04-24T02:34:13.607Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "ESET MirrorFace 2025",
"url": "https://www.welivesecurity.com/en/eset-research/operation-akairyu-mirrorface-invites-europe-expo-2025-revives-anel-backdoor/"
},
{
"source_name": "Trend Micro Earth Kasha Anel NOV 2024",
"url": "https://www.trendmicro.com/en_us/research/24/k/return-of-anel-in-the-recent-earth-kasha-spearphishing-campaign.html"
}
]
}Explicit source assertions (9)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S9027 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3020712a-95b1-4f23-9a24-68a2b401ae97
Trend Micro Earth Kasha Anel NOV 2024ATTACK:enterprise:S9027 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--37440d78-4ced-42c2-9a9c-fd71f10e6cd6
Trend Micro Earth Kasha Anel NOV 2024ATTACK:enterprise:S9027 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3f55cf61-8cbe-48ac-904f-299030d02dc3
Trend Micro Earth Kasha Anel NOV 2024ATTACK:enterprise:C0060 → uses → ATTACK:enterprise:S9027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5a86d1f6-5f6a-4bd9-bc0c-d8c46d3233b8
ESET MirrorFace 2025 · Trend Micro Earth Kasha Anel NOV 2024ATTACK:enterprise:S9027 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6f8d8b9e-d41b-4e5d-9562-4e2c59aa7771
Trend Micro Earth Kasha Anel NOV 2024ATTACK:enterprise:S9027 → uses → ATTACK:enterprise:T1574.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--819fa85e-041c-48a8-9d0c-2db2cd07047b
Trend Micro Earth Kasha Anel NOV 2024ATTACK:enterprise:S9027 → uses → ATTACK:enterprise:T1622
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ac588a85-7bc7-447a-8ebd-243af2a8dd62
Trend Micro Earth Kasha Anel NOV 2024ATTACK:enterprise:S9027 → uses → ATTACK:enterprise:T1027.016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b219dd79-cc7d-4119-a5e9-80b3703730f2
Trend Micro Earth Kasha Anel NOV 2024ATTACK:enterprise:S9027 → uses → ATTACK:enterprise:T1027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c5afcc91-bdd7-489a-a9d5-9840f5ba2259
Trend Micro Earth Kasha Anel NOV 2024