CrackedCantil 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (254)

言語

en	218
ru	20
es	14
pl	2

国・地域

us	134
de	64
ru	4

アクター

CrackedCantil	7
Stealc	6
RedLine Stealer	5
Amadey	5
Cobalt Strike	4

関心

タイプ

Not Defined	80
Content Management System	10
Operating System	8
Forum Software	8
Programming Language Software	6

ベンダー

Not Defined	54
IBM	12
Microsoft	8
Oracle	6
Google	4

製品

PHPepperShop	4
Esoftpro Online Guestbook Pro	4
Star Articles	4
Cluster Project rgmanager	4
Google Android	2

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	Indexu suggest_category.php クロスサイトスクリプティング	3.5	3.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.13
2	Joomla CMS com_easyblog SQLインジェクション	6.3	6.1	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00000	0.27
3	Citrix NetScaler ADC/NetScaler Gateway OpenID openid-configuration ns_aaa_oauthrp_send_openid_config CitrixBleed メモリ破損	8.3	8.2	$25k-$100k	$0-$5k	High	Official Fix	0.96869	0.00	CVE-2023-4966
4	TikiWiki tiki-register.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01009	1.40	CVE-2006-6168
5	LogicBoard CMS away.php Redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	2.04
6	SPIP spip.php クロスサイトスクリプティング	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00132	0.60	CVE-2022-28959
7	PHP Link Directory Administration Page index.html クロスサイトスクリプティング	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00374	0.33	CVE-2007-0529
8	SourceCodester Alphaware Simple E-Commerce System admin_index.php SQLインジェクション	7.0	6.8	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00171	0.03	CVE-2023-1503
9	PHP Scripts Mall Multi Language Olx Clone Script クロスサイトスクリプティング	5.2	4.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00115	0.02	CVE-2018-6845
10	System Dashboard Plugin sd_option_value 特権昇格	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00051	0.00	CVE-2023-5713
11	DZCP Witze Addon index.php SQLインジェクション	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.00261	0.02	CVE-2012-5000
12	TOTOLINK A860R downloadFile.cgi 特権昇格	7.6	7.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.44862	0.04	CVE-2022-40475
13	Corel ActiveCGM Browser ActiveX Control acgm.dll メモリ破損	10.0	9.0	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.04928	0.00	CVE-2007-2921
14	IBM Tivoli Directory Server Web Administration Tool 情報の漏洩	7.5	7.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00277	0.00	CVE-2015-1977
15	Storytlr クロスサイトスクリプティング	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00193	0.06	CVE-2014-100038
16	Big Webmaster Big Webmaster Guestbook Script addguest.cgi クロスサイトスクリプティング	4.3	3.9	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00615	0.04	CVE-2006-2231
17	PHPGurukul User Registration & Login and User Management System bwdates-report-result.php SQLインジェクション	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00043	0.06	CVE-2024-28323
18	Dreaxteam Xt-News show_news.php SQLインジェクション	7.3	7.1	$0-$5k	$0-$5k	High	Unavailable	0.00202	0.02	CVE-2006-6747
19	D-Link DNS-320 system_mgr.cgi 特権昇格	8.0	8.0	$5k-$25k	$0-$5k	High	Not Defined	0.97394	0.00	CVE-2020-25506
20	Bitrix24 tools.php 情報の漏洩	7.5	7.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02754	0.03	CVE-2023-1719

IOC - Indicator of Compromise (13)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	Identified	タイプ	信頼度
1	5.42.64.41		CrackedCantil	2024年02月01日	verified	高
2	13.32.121.85	server-13-32-121-85.fra60.r.cloudfront.net	CrackedCantil	2024年02月01日	verified	高
3	18.66.142.79	server-18-66-142-79.fra60.r.cloudfront.net	CrackedCantil	2024年02月01日	verified	高
4	XX.XX.XXX.XXX		Xxxxxxxxxxxxx	2024年02月01日	verified	高
5	XXX.XX.XX.XXX		Xxxxxxxxxxxxx	2024年02月01日	verified	高
6	XXX.XX.XXX.XX		Xxxxxxxxxxxxx	2024年02月01日	verified	高
7	XXX.X.XX.XXX	xxxxxx.xxx.xx.x.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxxxxxxxxxxx	2024年02月01日	verified	高
8	XXX.XXX.XXX.XX		Xxxxxxxxxxxxx	2024年02月01日	verified	高
9	XXX.XXX.X.XX		Xxxxxxxxxxxxx	2024年02月01日	verified	高
10	XXX.XXX.XX.XXX		Xxxxxxxxxxxxx	2024年02月01日	verified	高
11	XXX.XXX.XX.X		Xxxxxxxxxxxxx	2024年02月01日	verified	高
12	XXX.XXX.XXX.XX		Xxxxxxxxxxxxx	2024年02月01日	verified	高
13	XXX.XX.XX.XX		Xxxxxxxxxxxxx	2024年02月01日	verified	高

TTP - Tactics, Techniques, Procedures (12)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	高
2	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	高
3	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	高
4	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
5	TXXXX	CAPEC-136	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
6	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
7	TXXXX	CAPEC-0	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	高
8	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
9	TXXXX	CAPEC-0	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
10	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
11	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
12	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (141)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/+CSCOE+/logon.html	predictive	高
2	File	/advanced-tools/nova/bin/netwatch	predictive	高
3	File	/cgi-bin/downloadFile.cgi	predictive	高
4	File	/cgi-bin/system_mgr.cgi	predictive	高
5	File	/client/campaign_track.php	predictive	高
6	File	/forum/away.php	predictive	高
7	File	/oauth/idp/.well-known/openid-configuration	predictive	高
8	File	/spip.php	predictive	中
9	File	/userLogin.asp	predictive	高
10	File	ad.cgi	predictive	低
11	File	addguest.cgi	predictive	中
12	File	admin/addProxyConnector_commit.action	predictive	高
13	File	admin/admin_index.php	predictive	高
14	File	aff_news.php	predictive	中
15	File	allmanageup.pl	predictive	高
16	File	amadmin.pl	predictive	中
17	File	xxx-xx-xxx/xxx_xxx/xxx_xxxx.x	predictive	高
18	File	xxxxxxx.xxxxxxxx.xxx	predictive	高
19	File	xxxxxxx.xxxxxxxx.xxx	predictive	高
20	File	xxxxxxx.xxxxx.xxx	predictive	高
21	File	xxxxxxx.xxxxxxxxx.xxx	predictive	高
22	File	xxxxxxxxxxxxx.xx	predictive	高
23	File	xxxxxxx.xxx	predictive	中
24	File	xxx_xxxxx.xxx	predictive	高
25	File	xxxxxx/xxxxxxx/xxxx/xxxxxxx/xxxxxxx/xxxx_xxxxxxx.xxx	predictive	高
26	File	xxxxxx/xxxxxxx/xxxx/xxxxx.xxx	predictive	高
27	File	xxx_xxxxxxxxx.xxx	predictive	高
28	File	xxxxxxx-xxxxxx-xxxxxx.xxx	predictive	高
29	File	xxxxxx_xxxx.xxx	predictive	高
30	File	xxxx_xxxx.xxx	predictive	高
31	File	xxxxxxxxxxx.xxx	predictive	高
32	File	xxxxxxxxx.xxx	predictive	高
33	File	xxxx.xxx	predictive	中
34	File	xxxxxxx_xxxxx.xxx	predictive	高
35	File	xxxxxxx.xxx	predictive	中
36	File	xxxxxx.xxx	predictive	中
37	File	xxxxxxx/xxxxxxx/xxxxxxx/xxxxxx.x	predictive	高
38	File	xxxxxxx/xxxxx/xxxxx/xxxxxx-xxx.x	predictive	高
39	File	xxxxxxx.xx	predictive	中
40	File	xxxxxxxx-xxxxx-xxx-xxxxxxx.xx	predictive	高
41	File	xxxxxxx-xxxxxxx.xxxx	predictive	高
42	File	xxxxx.xxx	predictive	中
43	File	xxxxxxxx.xxx	predictive	中
44	File	xxxxxxx/xxxx.xxx	predictive	高
45	File	xxxxxxx.xxx_	predictive	中
46	File	xxxxxxxxxxxxxxx.xxx	predictive	高
47	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	高
48	File	xxxxx.xxxx	predictive	中
49	File	xxxxx.xxx	predictive	中
50	File	xxxxxxxx.xxx	predictive	中
51	File	xxxxxxxx/xxxxxxxxx/xxxxxxxxxxxxx.xxxx	predictive	高
52	File	xxxxx/xxxxx.xxx	predictive	高
53	File	xxxxxxx.xxx	predictive	中
54	File	xxxxxxxx.xxx	predictive	中
55	File	xxxxxxx.xxx	predictive	中
56	File	xxx/xxxxxxxxxxx.xx	predictive	高
57	File	xxxxxxxx.xx	predictive	中
58	File	xxxxxx.xxx	predictive	中
59	File	xxxxxxxxxx.xxx	predictive	高
60	File	xxxxxx/xxxxxx:xxxxxxxxxxxxxxxxx	predictive	高
61	File	xxx-xxxxxxxx.xx	predictive	高
62	File	xxx_xxxx.xxx	predictive	中
63	File	xxxxxx_xxxxxx/xxxxxxx/xxx.xxx.xxxx.xxxxxx.xxxxxxx.xxxxxxxxxxx.xxx	predictive	高
64	File	xxxxxxxx.xxx	predictive	中
65	File	xxxxx.xxx	predictive	中
66	File	xxxxxxx.xxx	predictive	中
67	File	xxxxxxxxxx.xxx	predictive	高
68	File	xxxxxxxx.xxx	predictive	中
69	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	高
70	File	xxxx_xxxxxxxx.xxx	predictive	高
71	File	xxxx_xxxxxx.xxx	predictive	高
72	File	xxxx/xxxxx/xxxx_xxxxxxxxxxxxx.xxx	predictive	高
73	File	xxxx/xxxxx/xxxx_xxxxxx_xxxx.xxx	predictive	高
74	File	xxxx/xxxxxxx.xxx	predictive	高
75	File	xxxx_xxxxxxxx.xxx/xxxx_xxxx.xxx	predictive	高
76	File	xxxx_xxxx.xxx	predictive	高
77	File	xxxxx.xxx	predictive	中
78	File	xxxxxxxx.xxx	predictive	中
79	File	xxxxxxx-xxxxxxx.xxx	predictive	高
80	File	xxxxxxx_xxxxxxxx.xxx	predictive	高
81	File	xxxxxxxxx.xxx	predictive	高
82	File	xxxx-xxxxxxxx.xxx	predictive	高
83	File	xxxxxxxxxx.xxx	predictive	高
84	File	xxx-xxxxx.xxx	predictive	高
85	File	xxxxxx_xxxxxxxx.xxx	predictive	高
86	File	xx-xxxxx/xxxx.xxx	predictive	高
87	File	xxxxx_xxx/xxxxxxx/xxxxxxxxx/xxxx.xxx	predictive	高
88	Library	/_xxx_xxx/xxxxx.xxx	predictive	高
89	Library	xxxx.xxx	predictive	中
90	Library	xxx-xx-xxx/xxx_xxx/xxx_xxxx.x	predictive	高
91	Library	xxxxxxx.xxx	predictive	中
92	Argument	xxx_xxxx	predictive	中
93	Argument	xxxxxxxxx	predictive	中
94	Argument	xxxxx	predictive	低
95	Argument	xxxxxxx	predictive	低
96	Argument	xxx	predictive	低
97	Argument	xxxx_xxxx	predictive	中
98	Argument	xxxxxxxx/xxxxxx	predictive	高
99	Argument	xxxxxxx	predictive	低
100	Argument	xxxxxxxxxx	predictive	中
101	Argument	xxxxxxxxxxxxxxxxxxxxx	predictive	高
102	Argument	xxxxx	predictive	低
103	Argument	xxx	predictive	低
104	Argument	xxxxxxxx	predictive	中
105	Argument	xx	predictive	低
106	Argument	xxxxxxx	predictive	低
107	Argument	xxxxx	predictive	低
108	Argument	xxxxxxxx	predictive	中
109	Argument	xxxxx	predictive	低
110	Argument	xxxxx_xxx	predictive	中
111	Argument	xxxx	predictive	低
112	Argument	xxxxx	predictive	低
113	Argument	xxxxxxxxx_xxxxxxxxxxxxxx	predictive	高
114	Argument	xx	predictive	低
115	Argument	xx_xxxx	predictive	低
116	Argument	xxxxxxxxxxxx	predictive	中
117	Argument	xxxxxxxxxxxx	predictive	中
118	Argument	xxxx	predictive	低
119	Argument	xxxxxxx	predictive	低
120	Argument	xxxx	predictive	低
121	Argument	xxxx	predictive	低
122	Argument	xxxxx	predictive	低
123	Argument	xxxxxx	predictive	低
124	Argument	xxxxxx	predictive	低
125	Argument	xxxx_xxxx	predictive	中
126	Argument	xxxxxx	predictive	低
127	Argument	xxxxxxxxx	predictive	中
128	Argument	xxxxx	predictive	低
129	Argument	xxx	predictive	低
130	Argument	xxxxx	predictive	低
131	Argument	xxxx	predictive	低
132	Argument	xxxx/xxxx/xxx	predictive	高
133	Argument	xxxxxxxx	predictive	中
134	Argument	xxxxxxxx/xxxxxxxx	predictive	高
135	Argument	xxxxxxxxxxx[xxxxxxxx]	predictive	高
136	Argument	xx-xxxxxx_xxxx	predictive	高
137	Input Value	xxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxx+xxxxxx+x,x,xxxx,xxx,x,x+xxxx+xxx_xxxxx+xxxxx+xx=x--+	predictive	高
138	Input Value	<xxxxxxxx>\x	predictive	中
139	Input Value	xxxxx' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxx	predictive	高
140	Network Port	xxxx xxxx	predictive	中
141	Network Port	xxx/xxxx	predictive	中

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!