Drinik 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (313)

言語

en	246
pl	18
it	16
de	14
es	8

国・地域

us	226
es	74
pl	2
cn	2
it	2

アクター

Drinik	4
Cobalt Strike	2
FunnySwitch	1
TAG-53	1
TrickBot	1

関心

タイプ

Not Defined	64
Content Management System	18
SCADA Software	14
Programming Language Software	8
Office Suite Software	6

ベンダー

Not Defined	42
Microsoft	16
Siemens	14
Tiki	4
SourceCodester	4

製品

Siemens SPPA-T3000 MS3000 Migration Server	14
Microsoft Windows	6
Microsoft Office	4
MKCMS	2
Dreaxteam Xt-News	2

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	DZCP deV!L`z Clanportal config.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.50	CVE-2010-0966
2	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash 情報の漏洩	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02016	0.02	CVE-2007-1192
3	Tiki Wiki CMS Groupware tiki-edit_wiki_section.php クロスサイトスクリプティング	5.2	5.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00110	0.00	CVE-2010-4240
4	Pligg cloud.php SQLインジェクション	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.27
5	Tiki TikiWiki tiki-editpage.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01194	0.03	CVE-2004-1386
6	JForum jforum.page 未知の脆弱性	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00173	0.02	CVE-2022-26173
7	Tiki Admin Password tiki-login.php 弱い認証	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00936	2.69	CVE-2020-15906
8	HP Storage Data Protector メモリ破損	10.0	10.0	$25k-$100k	$0-$5k	High	Not Defined	0.52178	0.06	CVE-2014-2623
9	AlstraSoft AskMe Pro register.php クロスサイトスクリプティング	3.5	3.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.00
10	Siemens SPPA-T3000 MS3000 Migration Server Service Port 5010 メモリ破損	6.4	6.3	$5k-$25k	$5k-$25k	Not Defined	Workaround	0.00275	0.04	CVE-2019-18304
11	Siemens SPPA-T3000 MS3000 Migration Server Service Port 7061 メモリ破損	6.4	6.3	$5k-$25k	$0-$5k	Not Defined	Workaround	0.00097	0.04	CVE-2019-18310
12	Microsoft Windows OpenType Font Parser メモリ破損	7.6	7.5	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.04046	0.04	CVE-2019-1456
13	Microsoft Windows Win32k 情報の漏洩	4.9	4.9	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00049	0.00	CVE-2019-1440
14	Microsoft Windows GDI 情報の漏洩	4.9	4.9	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.02481	0.00	CVE-2019-1439
15	Expinion.net News Manager Lite comment_add.asp クロスサイトスクリプティング	4.3	3.8	$0-$5k	$0-$5k	Unproven	Official Fix	0.00607	0.02	CVE-2004-1845
16	TikiWiki tiki-register.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01009	1.38	CVE-2006-6168
17	My Link Trader out.php SQLインジェクション	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.13
18	Openads adclick.php Remote Code Execution	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.01871	0.24	CVE-2007-2046
19	WordPress wp-register.php クロスサイトスクリプティング	4.3	4.2	$5k-$25k	$0-$5k	High	Unavailable	0.00533	0.04	CVE-2007-5106
20	PHPizabi template.class.php assignuser 情報の漏洩	4.3	4.2	$0-$5k	$0-$5k	High	Unavailable	0.00507	0.05	CVE-2008-2018

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	Identified	タイプ	信頼度
1	78.110.116.82	78.110.116.82.asiatech.cloud	Drinik	2024年04月03日	verified	高
2	XXX.XXX.XX.XXX	xxx-xxx-xx-xxx-xxxx.xxxxxxxxxxxx.xxx	Xxxxxx	2024年04月03日	verified	高
3	XXX.X.XXX.XX	xxx-x-xxx-xx-xxxx.xxxxxxxxxxxx.xxx	Xxxxxx	2024年04月03日	verified	高
4	XXX.XX.XXX.XX	xxx-xx-xxx-xx-xxxx.xxxxxxxxxxxx.xxx	Xxxxxx	2024年04月02日	verified	高
5	XXX.XX.XXX.XXX	xxx-xx-xxx-xxx-xxxx.xxxxxxxxxxxx.xxx	Xxxxxx	2024年04月03日	verified	高

TTP - Tactics, Techniques, Procedures (10)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	高
2	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	高
3	TXXXX.XXX	CAPEC-209	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	高
4	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
5	TXXXX	CAPEC-108	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
6	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
7	TXXXX	CAPEC-0	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	高
8	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
9	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
10	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (96)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/forum/away.php	predictive	高
2	File	/out.php	predictive	中
3	File	/php-sms/classes/Master.php	predictive	高
4	File	adclick.php	predictive	中
5	File	add.php/del.php	predictive	高
6	File	addentry.php	predictive	中
7	File	add_comment.php	predictive	高
8	File	admin.php	predictive	中
9	File	admin/index.php	predictive	高
10	File	admin/scripts/FileUploader/php.php	predictive	高
11	File	case.filemanager.php	predictive	高
12	File	cashconfirm.php	predictive	高
13	File	channels/chan_skinny.c	predictive	高
14	File	cloud.php	predictive	中
15	File	xxxxxxxx.xxx	predictive	中
16	File	xxxxxxx_xxx.xxx	predictive	高
17	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	高
18	File	xx/xxxxx/xxxxxx_xxxxx.xxx	predictive	高
19	File	xxxx.xxx	predictive	中
20	File	xxxx.xxx	predictive	中
21	File	xxxxxxxxx.xxx	predictive	高
22	File	xxx/xxxxxx.xxx	predictive	高
23	File	xxxxx.xxxx	predictive	中
24	File	xxxxx.xxx	predictive	中
25	File	xxxxxx.xxxx	predictive	中
26	File	xxxx.xxx	predictive	中
27	File	xxxxxxx/xxx.xxx	predictive	高
28	File	xxxxxxxx.xxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxxxxxx	predictive	高
29	File	xxxxxxxxx.xxx	predictive	高
30	File	xxx_xxxx.xxx	predictive	中
31	File	xxxx.xxx	predictive	中
32	File	xxxxx.xxx	predictive	中
33	File	xxxxxxxx.xx	predictive	中
34	File	xxxxxxxx.xxx	predictive	中
35	File	xxxxxxxxxx.xxx	predictive	高
36	File	xxxxxxxx.xxx	predictive	中
37	File	xxxxxxxx.xxx	predictive	中
38	File	xxxxxxx_xxx_xxxxx_xxxxxx.xxxx	predictive	高
39	File	xxxxxx.xxx	predictive	中
40	File	xxx/xxxx/xxxx/xxx/xxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
41	File	xxxxxxx-xxxxxxx.xxx	predictive	高
42	File	xxxxxxxx.xxxxx.xxx	predictive	高
43	File	xxxx-xxxxxxxx.xxx	predictive	高
44	File	xxxx-xxxx_xxxx_xxxxxxx.xxx	predictive	高
45	File	xxxx-xxxxx.xxx	predictive	高
46	File	xxxx-xxxxxxxx.xxx	predictive	高
47	File	xxxxxxx/xxxxxxxx.xxx	predictive	高
48	File	xxx.xxx	predictive	低
49	File	xxxx/xxxxxxxx.xxx	predictive	高
50	File	xxxxx.xxx	predictive	中
51	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	高
52	File	xx-xxxxxxxx.xxx	predictive	高
53	Library	xxxx/xxx/xxxxxx/xx-xxxx-xxxxxx.xxx	predictive	高
54	Library	xxxxxxxxx.x.x.xxx.xxx	predictive	高
55	Library	xxxxxxxx.xxx	predictive	中
56	Library	xxxxxxxx.xxx	predictive	中
57	Argument	$xxx_xxxx	predictive	中
58	Argument	$xxxx	predictive	低
59	Argument	xx_xxxxx_xxx_xxxx	predictive	高
60	Argument	xxxxxxxx	predictive	中
61	Argument	xxx	predictive	低
62	Argument	xxxxxxxxxx	predictive	中
63	Argument	xxxxxxxxx[x]	predictive	中
64	Argument	xxxxxxx	predictive	低
65	Argument	xxxx	predictive	低
66	Argument	xxxxxxx	predictive	低
67	Argument	xxxxxxx	predictive	低
68	Argument	xxxxx	predictive	低
69	Argument	xx_xxxxx_xx	predictive	中
70	Argument	xxxxxxx	predictive	低
71	Argument	xxxx_xxxxx	predictive	中
72	Argument	xxxx	predictive	低
73	Argument	xxxxxxxx	predictive	中
74	Argument	xx	predictive	低
75	Argument	xx_xxxx	predictive	低
76	Argument	xxxx	predictive	低
77	Argument	xxxxxxx	predictive	低
78	Argument	xxx	predictive	低
79	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	高
80	Argument	xxxxxx	predictive	低
81	Argument	xx	predictive	低
82	Argument	xxxx	predictive	低
83	Argument	xxxxxxxx	predictive	中
84	Argument	xxxx_xxxx	predictive	中
85	Argument	xxx	predictive	低
86	Argument	xxxxx	predictive	低
87	Argument	xxxxxxxxxxxxxxx	predictive	高
88	Argument	xxx	predictive	低
89	Argument	xxxx	predictive	低
90	Argument	xxxxx	predictive	低
91	Argument	xxx	predictive	低
92	Argument	xxxx_xxxxx	predictive	中
93	Argument	xxxx_xxxxx	predictive	中
94	Input Value	xxxxx.xxx	predictive	中
95	Network Port	xxx/xxxx	predictive	中
96	Network Port	xxx/xxxx	predictive	中

参考 (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!