Amadey Bot 解析

IOB - Indicator of Behavior (134)

タイムライン

言語

en114
ru12
es4
fr2
it2

国・地域

アクター

アクティビティ

関心

タイムライン

タイプ

ベンダー

製品

Croc8
SourceCodester Human Resource Management System4
Kostac PLC Programming Software4
Dolibarr ERP CRM4
Netgear WNDR3700v24

脆弱性

#脆弱性BaseTemp0day本日修復EPSSCTICVE
1openSUSE welcome Local Privilege Escalation4.54.3$0-$5k$0-$5kNot DefinedOfficial Fix0.000550.02CVE-2023-32184
2SourceCodester Medical Certificate Generator App action.php SQLインジェクション8.17.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.001160.00CVE-2023-0774
3Microsoft Exchange Server Remote Code Execution7.67.1$25k-$100k$0-$5kFunctionalOfficial Fix0.234410.04CVE-2021-31206
4nginx 特権昇格6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.002413.22CVE-2020-12440
5JetBrains TeamCity 弱い認証8.58.4$0-$5k$0-$5kHighOfficial Fix0.970430.06CVE-2023-42793
6Nagios XI POST Request banner_message-ajaxhelper.php SQLインジェクション6.06.0$0-$5k$0-$5kNot DefinedNot Defined0.000850.04CVE-2023-40931
7Openupload Stable compress-inc.php 特権昇格7.57.4$0-$5k$0-$5kNot DefinedNot Defined0.000970.00CVE-2023-36319
8Dolibarr ERP CRM 特権昇格7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.000970.22CVE-2023-38887
9NVIDIA DGX H100 BMC Host KVM Daemon メモリ破損7.87.8$0-$5k$0-$5kNot DefinedNot Defined0.000420.05CVE-2023-25527
10NVIDIA Cumulus Linux VxLAN-encapsulated IPv6 Packet 情報の漏洩5.95.9$0-$5k$0-$5kNot DefinedNot Defined0.000870.00CVE-2023-25525
11Mitsubishi Electric GX Works3 Incomplete Fix CVE-2020-14496 特権昇格8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.000420.04CVE-2023-4088
12NVIDIA DGX H100 BMC Web Server Plugin メモリ破損9.19.1$0-$5k$0-$5kNot DefinedNot Defined0.001190.00CVE-2023-25528
13Dolibarr ERP CRM Command Privilege Escalation6.76.7$0-$5k$0-$5kNot DefinedNot Defined0.001600.07CVE-2023-38886
14Dolibarr ERP CRM REST API Module testSqlAndScriptject クロスサイトスクリプティング6.56.5$0-$5k$0-$5kNot DefinedNot Defined0.001780.04CVE-2023-38888
15IOBit Malware Fighter ImfHpRegFilter.sys サービス拒否4.44.3$0-$5k$0-$5kNot DefinedNot Defined0.000420.05CVE-2020-24089
16ISL ARP Guard クロスサイトスクリプティング4.44.4$0-$5k$0-$5kNot DefinedNot Defined0.000440.00CVE-2023-39575
17Nagios XI Custom Logo クロスサイトスクリプティング4.44.4$0-$5k$0-$5kNot DefinedNot Defined0.000530.04CVE-2023-40932
18graphql Query Parser OverlappingFieldsCanBeMergedRule サービス拒否4.54.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000530.04CVE-2023-26144
19Linux Kernel BPF verifier.c backtrack_insn Remote Code Execution9.59.4$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000430.03CVE-2023-2163
20Croc Custom Shared Secret Privilege Escalation5.45.4$0-$5k$0-$5kNot DefinedNot Defined0.000520.00CVE-2023-43617

キャンペーン (2)

These are the campaigns that can be associated with the actor:

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (15)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (101)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDクラスIndicatorタイプ信頼度
1File.ssh/authorized_keyspredictive
2File/admin/api/theme-edit/predictive
3File/face-recognition-php/facepay-master/camera.phppredictive
4File/forum/PostPrivateMessagepredictive
5File/home/masterConsolepredictive
6File/hrm/employeeadd.phppredictive
7File/hrm/employeeview.phppredictive
8File/m4pdf/pdf.phppredictive
9File/nagiosxi/admin/banner_message-ajaxhelper.phppredictive
10Fileaction.phppredictive
11Fileadmin.php&r=article/AdminContent/editpredictive
12Fileadmin.xmlpredictive
13Filexxxxx/?xxxx=xxxxxpredictive
14Filexxxx/xx_*.xxxpredictive
15Filexxx.xxxpredictive
16Filexxxxxxxxxxx/xxxxxxxxxxx/xxxxxxxxx.xxxpredictive
17Filexxxxxx/xxxxx/xxxxx.xxxpredictive
18Filexxxxxxxx-xxx.xxxpredictive
19Filexxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxx/xxx/xxxxxx.xxxxxxxxx.xxxpredictive
20Filexxxxxx.xxxxpredictive
21Filexxxxx_xxxx.xpredictive
22Filexxxx_xxxxxx.xxxpredictive
23Filexxxx_xxxxxxxxx.xxxxxpredictive
24Filexx/xxxxx.xxxpredictive
25Filexxx/xxxxx.xxxxxxxxxxx.xxxpredictive
26Filexxx/xxxxxx.xxxpredictive
27Filexxxxx.xxxpredictive
28Filexxxxx.xxx?xxxx=xxxxxpredictive
29Filexxxx_xxxx.xxxpredictive
30Filexxxxxx.xxxxxxxxxx.xxpredictive
31Filexxxxxx/xxx/xxxxxxxx.xpredictive
32Filexxx/xxxxxxx/xxxxxx.xxpredictive
33Filexxx/xxxxxx.xxpredictive
34Filexxxxx.xxxpredictive
35Filexxxxx.xxxpredictive
36Filexxxx/xxx/xxxx/xxxx/xxx/xxxxxxx/xxxxxx/xxxxxxxxxxxxxxxxxxxx/xxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxx.xxxxpredictive
37Filexxxx/xxx/xxxx/xxxxxx/xxxxx/xxxxxxxx/xxxxxxxxxx/xxxxxxxxx.xxxpredictive
38Filexxxxxxxxxx.xxpredictive
39Filexxxx_xxxxxxxx.xxxpredictive
40Filexxxxxxxx.xxxpredictive
41Filexxxxx_xxxxxx.xxxpredictive
42Filexxxxx.xpredictive
43Filexxxxxxx_xxxxx.xxxpredictive
44Filexxxxxxx/xxxxxxxxxx.xxpredictive
45Filexxx_xxx.xxxpredictive
46Filexxxxxx-xxxxxxxx.xxxpredictive
47Filexxxxxxxxx/xxxx/xxxxxxxx+xxxxxxxxx.xpredictive
48Filexxxx_xxxxx.xxxxpredictive
49Filexxx/xxxx/xxxx/xxxxxx/xxx/xxxxxxxxxxxxxxxx.xxxxpredictive
50Filexxx/xxxx/xxxx/xxx/xxxxxx/xxxxxx/xxx/xxxxxxxxxxxxxxxxxx.xxxxpredictive
51Filexxx/xxxxxxxxx.xpredictive
52Filexxxxx_xxxxx.xxxpredictive
53Filexxxxxx-xxxxxx.xxxpredictive
54Filexxx/xxx.xxxxx.xxxpredictive
55Filexxxxxxxx.xxxpredictive
56Filexxxx_xxxxxxxx.xxxpredictive
57Filexxxxxxx.xxxx.xxxpredictive
58Libraryxxxxxx[xxxxxx_xxxxpredictive
59Libraryxxxxxxxxxxxxxx.xxxpredictive
60Libraryxxxxxx.xxxpredictive
61Libraryxxxxx.xxxpredictive
62Argumentxxxxxxpredictive
63Argumentxxxxxpredictive
64Argumentxxxxxxxxpredictive
65Argumentxxxxxxxxxxxxpredictive
66Argumentxxpredictive
67Argumentxxxx_xxpredictive
68Argumentxxxxxxxpredictive
69Argumentxxxxxxxxxxxxxpredictive
70Argumentxxxxxx[xxxxxx_xxxx]predictive
71Argumentxxxxxxxpredictive
72Argumentxxxxxpredictive
73Argumentxxxxxxxxpredictive
74Argumentxxxx_xxpredictive
75Argumentxx_xxpredictive
76Argumentxxpredictive
77Argumentxxpredictive
78Argumentxx_xxxxxpredictive
79Argumentxxxxxxxxpredictive
80Argumentxxxxx/xxxxxxpredictive
81Argumentxxxxpredictive
82Argumentxxxxpredictive
83Argumentxxxxxpredictive
84Argumentxxx_xxxxpredictive
85Argumentxxxxpredictive
86Argumentxxxx_xxxxxxxxxxpredictive
87Argumentxxxxxpredictive
88Argumentxxxx_xxxxpredictive
89Argumentxxxxxxxxpredictive
90Argumentxxxxpredictive
91Argumentxxxxxxpredictive
92Argumentxxxxxxxxxxxxxpredictive
93Argumentxxxxxx_xxxxxxxxpredictive
94Argumentxxxxxxx/xxxxxxxpredictive
95Argumentxxxx/xxxxxx xxxxpredictive
96Argumentxxxx_xxxpredictive
97Argumentxxxpredictive
98Argumentxxx_xxxpredictive
99Argumentxxxxxxpredictive
100Argumentxxxxxxxxpredictive
101Argumentxxxxxpredictive

参考 (4)

The following list contains external sources which discuss the actor and the associated activities:

Might our Artificial Intelligence support you?

Check our Alexa App!