Gallmaker 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (262)

言語

en	202
zh	48
es	4
ru	4
pl	2

国・地域

la	222
us	16
cn	2

アクター

Cobalt Strike	11
Ave Maria	8
RedLine Stealer	6
AsyncRAT	5
Remcos	4

関心

タイプ

Not Defined	104
Content Management System	20
WordPress Plugin	14
Operating System	8
Firewall Software	6

ベンダー

Not Defined	110
Microsoft	10
Cisco	8
Adobe	6
Google	6

製品

Google Android	6
Microsoft Windows	6
Adobe ColdFusion	4
WordPress	4
Revive Adserver	4

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	TikiWiki tiki-register.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01075	10.00	CVE-2006-6168
2	Tiki Admin Password tiki-login.php 弱い認証	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00936	5.70	CVE-2020-15906
3	LogicBoard CMS away.php Redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	7.09
4	SPIP spip.php クロスサイトスクリプティング	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00132	0.29	CVE-2022-28959
5	Drupal Sanitization API クロスサイトスクリプティング	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00056	0.04	CVE-2020-13672
6	LiteSpeed Cache Plugin Shortcode クロスサイトスクリプティング	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00051	0.00	CVE-2023-4372
7	WebTitan Appliance Extensions Persistent クロスサイトスクリプティング	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.00
8	ipTIME NAS-I Bulletin Manage 特権昇格	7.1	7.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00988	0.06	CVE-2020-7847
9	request-baskets API Request {name} 特権昇格	6.4	6.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.08109	0.07	CVE-2023-27163
10	DZCP deV!L`z Clanportal config.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	1.17	CVE-2010-0966
11	PHP phpinfo クロスサイトスクリプティング	4.3	3.9	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.01960	0.00	CVE-2007-1287
12	nginx 特権昇格	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	3.22	CVE-2020-12440
13	Microsoft Windows Scripting Engine Remote Code Execution	5.9	5.1	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.18489	0.00	CVE-2021-34480
14	DevExpress ASP.NET Web Forms ASPxHttpHandlerModule DXR.axd 特権昇格	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00205	0.00	CVE-2022-41479
15	Basilix Webmail login.php3 特権昇格	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.07
16	JoomlaTune Com Jcomments admin.jcomments.php クロスサイトスクリプティング	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00489	0.07	CVE-2010-5048
17	Microsoft Office Remote Code Execution	7.0	6.1	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00199	0.03	CVE-2023-21735
18	Alt-N MDaemon Worldclient 特権昇格	4.9	4.7	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00090	0.07	CVE-2021-27182
19	CouchCMS mysql2i.func.php Path 情報の漏洩	3.3	3.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	0.02	CVE-2019-1010042
20	Esri ArcGIS Server SQLインジェクション	8.1	8.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00123	0.00	CVE-2021-29114

IOC - Indicator of Compromise (3)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	Identified	タイプ	信頼度
1	94.140.116.124		Gallmaker	2020年12月17日	verified	高
2	XX.XXX.XXX.XXX		Xxxxxxxxx	2020年12月17日	verified	高
3	XXX.XX.XXX.XX	xxxxxxx.xxxxx.xx	Xxxxxxxxx	2020年12月17日	verified	高

TTP - Tactics, Techniques, Procedures (19)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-21, CWE-22, CWE-24	Path Traversal	predictive	高
2	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059	CAPEC-137	CWE-88, CWE-94, CWE-1321	Argument Injection	predictive	高
4	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	高
5	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
6	TXXXX.XXX	CAPEC-16	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
7	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
8	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
9	TXXXX	CAPEC-	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	高
10	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
11	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
12	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
13	TXXXX	CAPEC-112	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
14	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
15	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
16	TXXXX.XXX	CAPEC-	CWE-XX	Xxxxxxxxxxxxx	predictive	高
17	TXXXX	CAPEC-112	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
18	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
19	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (146)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/admin/dl_sendmail.php	predictive	高
2	File	/adminPage/conf/reload	predictive	高
3	File	/api/baskets/{name}	predictive	高
4	File	/api/v2/cli/commands	predictive	高
5	File	/Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=	predictive	高
6	File	/DXR.axd	predictive	中
7	File	/forum/away.php	predictive	高
8	File	/mfsNotice/page	predictive	高
9	File	/novel/bookSetting/list	predictive	高
10	File	/novel/userFeedback/list	predictive	高
11	File	/owa/auth/logon.aspx	predictive	高
12	File	/spip.php	predictive	中
13	File	/x_portal_assemble_surface/jaxrs/portal/list?v=8.2.3-4-43f4fe3	predictive	高
14	File	/zm/index.php	predictive	高
15	File	adclick.php	predictive	中
16	File	admin.cropcanvas.php	predictive	高
17	File	xxxxx.xxxxxxxxx.xxx	predictive	高
18	File	xxxxxxxxxxx/xxxxxxx/xxxxx/xxxxx/xxxxxxxxx/xxxxxxxx.xxx	predictive	高
19	File	xxxxxxx.xx	predictive	中
20	File	xxxx/xxxxxxxxxxxx.xxx	predictive	高
21	File	xxxx.xxx	predictive	中
22	File	xx_xxxx_xx_xxxx_xxxx.xxx	predictive	高
23	File	xxxxxxx.x	predictive	中
24	File	xxxx_xxxxxxx.xxx	predictive	高
25	File	xxx-xxx/xxxxxxx.xx	predictive	高
26	File	xxx-xxx/xxxxx	predictive	高
27	File	xxxxx.xxx	predictive	中
28	File	xxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxx/xxxx_xxxxx.xxxx	predictive	高
29	File	xxxxx-xxxxxxx.xxx	predictive	高
30	File	xxxxxxxxxx/xxx_xxxxxxxxxx/xxxxxxx/xxxxxxxxxx.xxx	predictive	高
31	File	xxxxxxxxxx\xxxx.xxx	predictive	高
32	File	xxxxxxxxxxx.xxx	predictive	高
33	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	高
34	File	xx.xxx	predictive	低
35	File	xxxxxxx/xxx/xxxxxxxx/xxxxxx/xxxxxxx.x	predictive	高
36	File	xxxx-xxxxxx.xxx	predictive	高
37	File	xxxxxxxxxxx.xxxxx.xxx	predictive	高
38	File	xxxx.xxx	predictive	中
39	File	xxxxx_xxxx.xxx	predictive	高
40	File	xxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxx	predictive	高
41	File	xxx/xxxxxx.xxx	predictive	高
42	File	xxxxxxxx/xxxxxxx/xxxxxxx.xxxx.xxx	predictive	高
43	File	xxxxx.xxxx	predictive	中
44	File	xxxxx.xxx	predictive	中
45	File	xxxxx.xxx/xxxxxx.xxx/xxxxxxxxxxxxx.xxx/xxxxxxxx.xxx	predictive	高
46	File	xxxxx.xxx?x=xxxx&x=xxxx&x=xx_xxx_xxxxxx	predictive	高
47	File	xxxxx.xxx?x=xxxx&x=xxxxxxx&x=xxx	predictive	高
48	File	xxxx_xxxxxxx.xxx	predictive	高
49	File	xxxxx.xxxx	predictive	中
50	File	xxxxx.xxx	predictive	中
51	File	xxxx.xxxx	predictive	中
52	File	xxxxxxxxx.x	predictive	中
53	File	xx_xxxx.x	predictive	中
54	File	xxx/xxxx/xxxx_xxxxxxxxx.x	predictive	高
55	File	xxxxxxx_xxxx.xxx	predictive	高
56	File	xxxxxx.xxx	predictive	中
57	File	xxxxxxxxxxxxxxxxx.xxx	predictive	高
58	File	xxxxxxx.xxx	predictive	中
59	File	xxxxxxxxxxxxxx.xxx	predictive	高
60	File	xxxxxxxxxx_xxxxxxxxx.xxx	predictive	高
61	File	xxxxxxx/xxxxxxx/xxx/xxxxxxxxxx.xxx?xxxxxxxx=xxxx&xxxxxx=xxxxxxxxxx	predictive	高
62	File	xxxxxx/xxx/xxxxxxxx/xxxxx/xxxxx_xxxx.xx	predictive	高
63	File	xxxx/xxxxxxxxxxxxxx/xxxx_xxxxxxx.x	predictive	高
64	File	xxxx_xxxx_xxxxxx.xxx	predictive	高
65	File	xxxxxxx_xxxxxx.xxx	predictive	高
66	File	xxxx_xxxxx.xxxx	predictive	高
67	File	xxxxxxxxxx_xxxx.xxx	predictive	高
68	File	xxx/xxxx/xxxx	predictive	高
69	File	xxxxxx\xxxxxxxx\xx_xxxxx_xxxxxxx.xxx	predictive	高
70	File	xxxxxxx.xxx.xx.xxxxxxxxxxx.xxx	predictive	高
71	File	xxxxxxxxx/xxxxxxxx.xxx	predictive	高
72	File	xxxx_xxxxxx.xx	predictive	高
73	File	xxxx-xxxxx.xxx	predictive	高
74	File	xxxx-xxxxxxxx.xxx	predictive	高
75	File	xxxxxxxxx.xxx	predictive	高
76	File	xxxxxx_xxxxx.xxx	predictive	高
77	File	xxxxxx.xxx	predictive	中
78	File	xxxxxxx-xxxxx.xxx	predictive	高
79	File	xxxx_xxxxx.xxx	predictive	高
80	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	高
81	File	xxxx.xxx	predictive	中
82	File	xx-xxxxx-xxxxxx.xxx	predictive	高
83	File	xx-xxxxxxxx/xxxxxxxxx.xxx	predictive	高
84	File	xxx/xxxxxxxx/xxxxxxxx.xxx	predictive	高
85	File	xxxx.xxx	predictive	中
86	File	~/xxx/xxxx-xxxxxxxxx.xxx	predictive	高
87	File	~/xxxxxxxx/xxxxx-xx-xxxxxxxxxx-xxxxxxxxx.xxx	predictive	高
88	Library	xxxxxxx/xxx.xxx.xxx.xxx	predictive	高
89	Argument	xxx_xxx	predictive	低
90	Argument	xxxx	predictive	低
91	Argument	xxxxxxxxx	predictive	中
92	Argument	xxxxxxxx	predictive	中
93	Argument	xxx_xxx_xx_xxx_xxxxxxxxxx_x	predictive	高
94	Argument	xxxxx_xxxx	predictive	中
95	Argument	xxxx_xxx_xxxx	predictive	高
96	Argument	xxxxxxxxxx	predictive	中
97	Argument	xxx	predictive	低
98	Argument	xxxxxxxxxxxxxxx	predictive	高
99	Argument	xxxxxx	predictive	低
100	Argument	xxxxxxxxxxxx	predictive	中
101	Argument	xxxx	predictive	低
102	Argument	xxxxxxxxx_xxxxxx	predictive	高
103	Argument	xxxxxxxxx	predictive	中
104	Argument	xx_xxxxxxx	predictive	中
105	Argument	xxxx	predictive	低
106	Argument	xxxxxxxx	predictive	中
107	Argument	xxxxx	predictive	低
108	Argument	xxxxxx_xxxxx	predictive	中
109	Argument	xxxxxxxxx/xxxxxx	predictive	高
110	Argument	xx_xx	predictive	低
111	Argument	xxxxxxx[xxxxxxx]	predictive	高
112	Argument	xxxxxxx	predictive	低
113	Argument	xxxxxx	predictive	低
114	Argument	xxxxx	predictive	低
115	Argument	xx	predictive	低
116	Argument	xxx	predictive	低
117	Argument	xxxx	predictive	低
118	Argument	xxxx	predictive	低
119	Argument	xxx xxxxxxxx/xxxxxxx xxxxxxxx	predictive	高
120	Argument	xxxxxxxx	predictive	中
121	Argument	xxxxxx/xxxxx/xxxx	predictive	高
122	Argument	xxxxxxx	predictive	低
123	Argument	xxxx	predictive	低
124	Argument	xxxxxx_xxxxxx	predictive	高
125	Argument	xxx	predictive	低
126	Argument	xxxxxxxx_xx	predictive	中
127	Argument	xxxxxx_xxxxx	predictive	中
128	Argument	xxxxxx	predictive	低
129	Argument	xxxx_xxxx	predictive	中
130	Argument	xxxx	predictive	低
131	Argument	xxxxxx	predictive	低
132	Argument	xxxxxxx	predictive	低
133	Argument	xxx	predictive	低
134	Argument	xxxxx	predictive	低
135	Argument	xxxxx/xxx	predictive	中
136	Argument	xxxx_xx	predictive	低
137	Argument	xxx	predictive	低
138	Argument	xxxxxxxx	predictive	中
139	Argument	xxx:xxxx	predictive	中
140	Argument	\xxxx\xxxx	predictive	中
141	Argument	_xxx_xxxxxxxxxxx_	predictive	高
142	Input Value	xxxxxxxxx' xxx 'x'='x	predictive	高
143	Input Value	xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx	predictive	高
144	Pattern	\|xx xx xx xx\|	predictive	高
145	Network Port	xxxxx	predictive	低
146	Network Port	xxx/xxxx	predictive	中

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!