GhostDNS Exploit Kit 解析

IOB - Indicator of Behavior (1000)

タイムライン

言語

en906
de28
zh22
es10
it10

国・地域

us872
cn46
es14
ru8
ir6

アクター

アクティビティ

関心

タイムライン

タイプ

ベンダー

製品

Apple Mac OS X50
Adobe Shockwave Player18
Oracle Java SE16
Google Chrome16
Oracle Enterprise Manager Grid Control14

脆弱性

#脆弱性BaseTemp0day本日修復EPSSCTICVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash 情報の漏洩5.35.2$5k-$25k計算中HighWorkaround0.020160.00CVE-2007-1192
2DZCP deV!L`z Clanportal config.php 特権昇格7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.009430.31CVE-2010-0966
3Microsoft IIS クロスサイトスクリプティング5.24.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.005480.08CVE-2017-0055
4vsftpd deny_file 未知の脆弱性3.73.6$0-$5k$0-$5kNot DefinedOfficial Fix0.003120.17CVE-2015-1419
5Microsoft IIS IP/Domain Restriction 特権昇格6.55.7$25k-$100k$0-$5kUnprovenOfficial Fix0.008170.28CVE-2014-4078
6HP Storage Data Protector メモリ破損10.010.0$25k-$100k$0-$5kHighNot Defined0.521780.00CVE-2014-2623
7Guangzhou 1GE ONU/V2804RGW formPing 特権昇格5.95.9$0-$5k$0-$5kNot DefinedNot Defined0.770790.00CVE-2020-8958
8LogicBoard CMS away.php Redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable0.000003.12
9PHP Link Directory Administration Page index.html クロスサイトスクリプティング4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.003740.24CVE-2007-0529
10Tiki Wiki CMS Groupware tiki-edit_wiki_section.php クロスサイトスクリプティング5.25.2$0-$5k$0-$5kNot DefinedNot Defined0.001100.04CVE-2010-4240
11Microsoft IIS FTP Server メモリ破損7.57.2$25k-$100k$0-$5kHighOfficial Fix0.968430.08CVE-2010-3972
12RARLabs WinRAR ZIP Archive Remote Code Execution6.36.0$0-$5k$0-$5kHighOfficial Fix0.354600.00CVE-2023-38831
13SourceCodester Simple Cold Storage Management System Contact Us 未知の脆弱性4.34.1$0-$5k$0-$5kProof-of-ConceptNot Defined0.000660.04CVE-2022-3585
14FLDS redir.php SQLインジェクション7.37.3$0-$5k$0-$5kHighUnavailable0.002030.04CVE-2008-5928
15Phplinkdirectory PHP Link Directory conf_users_edit.php 未知の脆弱性6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.005260.04CVE-2011-0643
16MGB OpenSource Guestbook email.php SQLインジェクション7.37.3$0-$5k$0-$5kHighUnavailable0.013020.66CVE-2007-0354
17Discuz! admin.php クロスサイトスクリプティング3.63.6$0-$5k$0-$5kNot DefinedNot Defined0.000540.06CVE-2018-19464
18nginx 特権昇格6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.002412.12CVE-2020-12440
19Basti2web Book Panel books.php SQLインジェクション7.37.0$0-$5k$0-$5kHighOfficial Fix0.000640.05CVE-2009-4889
20Esoftpro Online Guestbook Pro ogp_show.php SQLインジェクション7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.001080.35CVE-2009-4935

IOC - Indicator of Compromise (8)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (20)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (382)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDクラスIndicatorタイプ信頼度
1File/+CSCOE+/logon.htmlpredictive
2File/api/admin/system/store/order/listpredictive
3File/cgi-bin/user/Config.cgipredictive
4File/cgi-bin/wapopenpredictive
5File/cgi-sys/FormMail-clone.cgipredictive
6File/csms/?page=contact_uspredictive
7File/etc/ajenti/config.ymlpredictive
8File/forum/away.phppredictive
9File/goform/telnetpredictive
10File/modules/profile/index.phppredictive
11File/rom-0predictive
12File/tmp/phpglibccheckpredictive
13File/uncpath/predictive
14File/uploadpredictive
15File/var/tmp/sess_*predictive
16Fileaction.phppredictive
17Fileactionphp/download.File.phppredictive
18Fileadd_comment.phppredictive
19Fileadminpredictive
20Fileadmin.phppredictive
21Fileadmin/admin.phppredictive
22Fileadmin/conf_users_edit.phppredictive
23Fileadmin/content.phppredictive
24Fileadmin/index.php?id=users/action=edit/user_id=1predictive
25Fileadmin/memberviewdetails.phppredictive
26Fileadmin_gallery.php3predictive
27Fileaffich.phppredictive
28Fileagent/Core/Controller/SendRequest.cpppredictive
29Fileajax/telemetry.phppredictive
30FileakeyActivationLogin.dopredictive
31Filealbum_portal.phppredictive
32Fileapache-auth.confpredictive
33Fileapply.cgipredictive
34Filearticle.phppredictive
35Fileaskapache-firefox-adsense.phppredictive
36Fileattachment.cgipredictive
37Fileblueprints/sections/edit/1predictive
38Fileboaform/admin/formPingpredictive
39Filebooks.phppredictive
40Filecart.phppredictive
41Filecart_add.phppredictive
42Filecatalog.asppredictive
43Filecategory.phppredictive
44FileCFS.cpredictive
45Filecgi-bin/reorder2.asppredictive
46Filechecktransferstatus.phppredictive
47Fileclass.SystemAction.phppredictive
48Fileclientarea.phppredictive
49Filecloud.phppredictive
50Filexxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxpredictive
51Filexxxxxxxx_xxxxxxxxxx.xxxpredictive
52Filexxxxxxx_xxx.xxxpredictive
53Filexxx_xxxxxxx_xxxxxxxxx_xxxxxxxxx_xxxxxxxxxxxxxx.xxxpredictive
54Filexxxxxxxpredictive
55Filexxxxxxx.xpredictive
56Filexxxx/xxxxxxxxxxxxxxxxxxxx.xxxpredictive
57Filexxx-xxx/xxxxxxxxxxxxx.xxxpredictive
58Filexx_xxxx.xpredictive
59Filexxxx/xxxxxxxxxxxxxxx.xxxpredictive
60Filexxxxx_xxxxxxx_xxxx.xxxpredictive
61Filexxxxxxx.xxxpredictive
62Filexxxxxxxxxxxxx/xxxxxx/xxxx.xxxpredictive
63Filexxxxxx.xxxpredictive
64Filexxxxxxx_xxxx.xxxpredictive
65Filexxxxxxxx.xxxpredictive
66Filexxxxxxxxxxxxxxxx.xpredictive
67Filexxxxxxxx-xxxx.xxxpredictive
68Filex/xxxxxx/xxxxxxxx.xxxpredictive
69Filexxxxxxxx.xxxpredictive
70Filexxxxx.xxxpredictive
71Filexxxxxxx-xxxxxxx/xxxx/xxxxxx/xxxxxxxx/xxx/xxxxxxxxx/xxxxxx.xxpredictive
72Filexxxxx.xxxpredictive
73Filexxx/xxxx/xxxx_xxxxxx.xpredictive
74Filexxx/xxxxxxxx/xxx.xpredictive
75Filexxxx.xxxpredictive
76Filexxxxxxxxxx/xxx.xxpredictive
77Filexxxxxxxxx/xx/xxxxxxxxxxxx.xxxpredictive
78Filexxxxxxxxxxxxxxxxxxxxxxxx.xxxxpredictive
79Filexxxxxxxx.xxxpredictive
80Filexxxxxxxxxxxxxx.xxxpredictive
81Filexxxxxxxxxx.xxxpredictive
82Filexxxxxxx.xxxpredictive
83Filexxxxxxxxx.xxxpredictive
84Filexxxxxxxxx.xxpredictive
85Filexxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxxpredictive
86Filexxxx-xxxxxxx.xpredictive
87Filexxxxxx/xxxxxxpredictive
88Filexxxxxx_xx.xpredictive
89Filexx/xxx/xxxxx.xpredictive
90Filexxxxx.xxxpredictive
91Filexxxxxxx.xxxpredictive
92Filexxx/xxxxxx.xxxpredictive
93Filexxxxxxx/xxxxxxxxx_xxxxxxx.xxx.xxxpredictive
94Filexxxxx.xxxpredictive
95Filexxxxx.xxxxpredictive
96Filexxxxx.xxxpredictive
97Filexxxxx.xxx?xxx=xxxx&xxx=xxxxxxxxpredictive
98Filexxxxx_xx.xxxpredictive
99Filexxxxxxxx.xxxpredictive
100Filexxxx_xxxx.xxxpredictive
101Filexxxxxxxxxx/xxx/xxxxxx_xxxx.xxxpredictive
102Filexxx/xxxxxxxxxx/xxxxxxxxx.xxpredictive
103Filexxxxxx.xpredictive
104Filexxxxxxxxx/xxxxxx.xxx.xxxpredictive
105Filexxxxxxxxx/xxxxxx.xxxxx.xxxpredictive
106Filexxxxxxxxx/xxxxxxxx.xxxpredictive
107Filexxxx/xxxxxx/xxxxx.xxxpredictive
108Filexxxxxxxxx.xxxpredictive
109Filexxxxxxxxx/xxxxxxxxx/xxxxxxxx.xxxpredictive
110Filexxxxx.xxxxpredictive
111Filexxxxx.xxxpredictive
112Filexxx.xpredictive
113Filexxxxx_xxxxxxxxxx_xxxx.xpredictive
114Filexxxx.xxxpredictive
115Filexxxx.xxxpredictive
116Filexxxx/xxxxxxxxxxx-xxxxxx-xxxxx.xxxpredictive
117Filexxxxxxxx.xxx.xpredictive
118Filexxxxxxxxxx.xxxpredictive
119Filexxxxx/__xxxx_xxxx.xxxpredictive
120Filexxxxxxxx.xxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxxxxxxpredictive
121Filexxxxxx_xxxxxx.xxxpredictive
122Filexxx/xxxx/xxxx_xxxxxx.xpredictive
123Filexxxx_xxxx.xxxpredictive
124Filexxx_xxxxxxxx.xpredictive
125Filexxxxxxx.xxxpredictive
126Filexxx_xxxx.xxxpredictive
127Filexxxxxxx_xxxxxxxxx.xpredictive
128Filexxx/xxxxxx/xxxxxxxx/xxxxx/xxxxxxxxx.xxxxpredictive
129Filexxxxxxxxxxxx.xxxpredictive
130Filexxxxxx.xxxpredictive
131Filexxxxxx/xxxxxxx-xxx-xxxpredictive
132Filexxxxxxxxxxxx.xxxpredictive
133Filexxxxxxxxxx.xxx.xxxpredictive
134Filexxxpredictive
135Filexxxxx_xxxxxx.xxxpredictive
136Filexxxxxx.xxxpredictive
137Filexxxx_xxx.xxxpredictive
138Filexxxxxxx.xxxpredictive
139Filexxxx.xxxpredictive
140Filexxxxxxxx.xxxpredictive
141Filexxxxxxxx.xxxpredictive
142Filexxxxxxx.xxxpredictive
143Filexxxxxxxxxx.xxxpredictive
144Filexxx_xxxxxx.xxxpredictive
145Filexxxx.xxxpredictive
146Filexxxxxx.xxxpredictive
147Filexxxxx.xxxpredictive
148Filexxxxx.xxxpredictive
149Filexxxxxxxx.xxxpredictive
150Filexxxxxxxxxxxx.xxxpredictive
151Filexxxxxxxx_xxxxxx.xxxpredictive
152Filexxxxxxxx_xxxx.xxxpredictive
153Filexxxxx.xxxpredictive
154Filexxxxxxx.xxxpredictive
155Filexx_xxxx.xpredictive
156Filexxxx/xxxxxxxxxxxxxx/xxxx_xxxxxxx.xpredictive
157Filexxxxx.xxxpredictive
158Filexxxxxx.xxxpredictive
159Filexxxxxx.xxxpredictive
160Filexxxxxx.xxxpredictive
161Filexxxxxx.xxxpredictive
162Filexxxx-xxxxxx.xpredictive
163Filexxxx.xxxpredictive
164Filexxxx.xxxpredictive
165Filexxxx.xxxpredictive
166Filexxxxxxxxxxxxx.xxxpredictive
167Filexxxx_xxxxxxx_xxxxxxxx.xxxpredictive
168Filexxxxxxxxxxxxx.xxxpredictive
169Filexxxxx.xxxpredictive
170Filexxxxx_xxxxx.xxxpredictive
171Filexxxxxxxxxxxx.xxxpredictive
172Filexxxxxxxxx.xxxpredictive
173Filexxxxx.xpredictive
174Filexxxxxxxx.xxxxpredictive
175Filexxx_xxx.xpredictive
176Filexxxx-xxxxxxxx.xxxpredictive
177Filexxxx-xxxx_xxxx_xxxxxxx.xxxpredictive
178Filexxxx-xxxxx.xxxpredictive
179Filexxxxx_xxxxxx_xxxxxx.xxxpredictive
180Filexxx.xxxpredictive
181Filexxxxx/xxxxxxxx.xxxpredictive
182Filexxxxx_xxxxx.xxxxpredictive
183Filexxxx/xxxxxxxx/xxxxxxxx.xxxxpredictive
184Filexxxxxxxxx.xxpredictive
185Filexxxx/xxxxxxxx.xxxpredictive
186Filexxxx_xx_xxxx.xxxpredictive
187Filexxxx_xxxx.xxxpredictive
188Filexxx.xxxpredictive
189Filexxx.xxxpredictive
190Filexxxxxxxxxx.xxxpredictive
191Filexxxxxxx/xxxxxx/xxxxx/xxxxxxx/xxx/xxx.xxxpredictive
192Filexx-xxxxx/xxxxx.xxxpredictive
193Filexx-xxxxxxxx/xxxxx-xx-xxxxx.xxxpredictive
194Filexx-xxxxx.xxxpredictive
195Filexxx/xx_xxx.xxxpredictive
196File\xxxxxxx\xxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxpredictive
197File~/xxx-xxx-xxxxxx.xxxpredictive
198Libraryxxxxxxxx/xxxxxxx/xxxxxxxx/xxx/xxxx/xxxx/xxxxxx/xxx/xxxxxx/xxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxx/xxxxxxxx_xxxxxxxxxxxxxxxx.xxxxpredictive
199Libraryxxxxxx[xxxxxx_xxxxpredictive
200Libraryxxxxxx.xxxpredictive
201Libraryxxxxxxx.xxxpredictive
202Libraryxxxxxx.xxxpredictive
203Libraryxxxxxx.xxxpredictive
204Libraryxxxxxxx-xxxxxxx/xxx/xxxx/xxxx/xxx/xxxxxxxxxx/xxxxxxx/xxxxxxx/xxxxxxx.xxxxpredictive
205Libraryxxxxxx.xxxpredictive
206Libraryxxxxx.xxxpredictive
207Libraryxxxxxx.xxxpredictive
208Libraryxxx.xxxpredictive
209Libraryxxx/xxx/xxx.xxxx.xxxpredictive
210Libraryxxxxxxxx/xxx/xx.xxxpredictive
211Libraryxxx/xxxxxx/xxxxxxxx.xxpredictive
212Libraryxxx/xxxxxx/xxxxxxx/xxxxxxxxx.xxpredictive
213Libraryxxx/xxxxxx/xxxxxxx/xxxxx.xxpredictive
214Libraryxxx/xxxxxx/xxx/xxxxxxxxxxx_xxxxxxxxx.xxpredictive
215Libraryxxx/x.xpredictive
216Libraryxxx/xxxxxxx/xxxxx.xxpredictive
217Libraryxxx/xxxxxxx.xxpredictive
218Libraryxxxxxxxxx/xxxxxx_xxxxxxxxxx.xxx.xxxpredictive
219Libraryxxxxxxxx.xxxpredictive
220Libraryxxx.xxxpredictive
221Libraryxxxxxxxxx.x.x.xxx.xxxpredictive
222Libraryxxxxxxxx.xxxpredictive
223Libraryxxxxxx.xxxpredictive
224Libraryxxxxxx.xxxpredictive
225Libraryxxxxxxxxxx.xxxpredictive
226Libraryxxxxxxxxxx.xxxpredictive
227Libraryxxxx.xxxpredictive
228Libraryxxxxxx.xxxpredictive
229Libraryxxxxxxxx.xxxpredictive
230Libraryxxxxxxxx.xxxpredictive
231Libraryxxxxxxxx.xxxpredictive
232Libraryxxxxxxxx.xxxpredictive
233Libraryxxxxxx.xxxpredictive
234Argument$xxxxxxxpredictive
235Argumentxxxxxxxxxxxxpredictive
236Argumentxxxxxxpredictive
237Argumentxxxxxxxpredictive
238Argumentxxxxx_xxxpredictive
239Argumentxxxxx_xxxxxxxx_xxxxpredictive
240Argumentxxxxxpredictive
241Argumentxxxxxxxxpredictive
242Argumentxxxx_xxxxpredictive
243Argumentxxxxxx_xxxxpredictive
244Argumentxxxxxxpredictive
245Argumentxxxxxxxxxpredictive
246Argumentxxxxpredictive
247Argumentxxxxxxxxpredictive
248Argumentxxxxpredictive
249Argumentxxxxxpredictive
250Argumentxxxxxxpredictive
251Argumentxxxpredictive
252Argumentxxxxxxxpredictive
253Argumentxxxxxxxxxxpredictive
254Argumentxxxxxxxxxxpredictive
255Argumentxxxxxxxxxxpredictive
256Argumentxxxxxxxx_xxpredictive
257Argumentxxxxxpredictive
258Argumentxxx_xxpredictive
259Argumentxxxpredictive
260Argumentxxxx_xxpredictive
261Argumentxxxxxxxpredictive
262Argumentxxxxxxpredictive
263Argumentxxxxxx/xxxxxxxpredictive
264Argumentxxxxxx[xxxxxx_xxxx]predictive
265Argumentxxxxxxxpredictive
266Argumentxxxxxxxxxxpredictive
267Argumentxxxxxx_xxpredictive
268Argumentxxxxxxxpredictive
269Argumentxxxxxxxxxxxxxxxxpredictive
270Argumentxxxx_xxxpredictive
271Argumentxxxxxxxxxxxpredictive
272Argumentxxxx xx xxxxxxxpredictive
273Argumentxxx_xxxxpredictive
274Argumentxxx_xxxxpredictive
275Argumentxxxxxxxpredictive
276Argumentxxxxxpredictive
277Argumentxxxxxxxpredictive
278Argumentxxxxxpredictive
279Argumentxxxxx_xxpredictive
280Argumentxxxxpredictive
281Argumentxxxxxxxxxxpredictive
282Argumentxxx_xxxxx_xxpredictive
283Argumentxxxxxpredictive
284Argumentxxxx=xxxxxxpredictive
285Argumentxxxxxxpredictive
286Argumentx_xxxxxxxxpredictive
287Argumentxxx-xxx-xxxxpredictive
288Argumentxxxxpredictive
289Argumentxxx_xxxxxxxxxpredictive
290Argumentxxx_xxxxxxpredictive
291Argumentxxpredictive
292Argumentxxxxxxxxxpredictive
293Argumentxxxxx_xxxx/xxxxxx/xxxxxpredictive
294Argumentxxxxxpredictive
295Argumentxxxxxxpredictive
296Argumentxxxx_xxpredictive
297Argumentxxxx_xx[]predictive
298Argumentxx_xxxxxpredictive
299Argumentxxxpredictive
300Argumentxxxxxxxxpredictive
301Argumentxxxxxxxxxxxxxxpredictive
302Argumentxxxxxxxxxxpredictive
303Argumentxxxxxxxxxxxx_xxxxxxpredictive
304Argumentxxxxxxxxxpredictive
305Argumentxxxxxpredictive
306Argumentxxxxxxxxx_xxxxxxxx_xxxxpredictive
307Argumentxxxxxxxxxxxpredictive
308Argumentxxxpredictive
309Argumentxxxxxxxxxxxxxxxxxxxxxxxpredictive
310Argumentx-xxxpredictive
311Argumentxxxxpredictive
312Argumentxxxx/xxxxxxxxxx xxxxx/xxxxxpredictive
313Argumentxxxx_xxxxpredictive
314Argumentxxxpredictive
315Argumentxxpredictive
316Argumentxxxxxx_xxpredictive
317Argumentxxxxxxxxxpredictive
318Argumentxxxxxxxpredictive
319Argumentxxxxxxxxxxxxxxxxpredictive
320Argumentxxpredictive
321Argumentxxxxpredictive
322Argumentxxxxpredictive
323Argumentxxxx_xxpredictive
324Argumentxxxx_xxxx_xxxxxxxpredictive
325Argumentxxxxxpredictive
326Argumentxxxxxpredictive
327Argumentxxxxxxxxpredictive
328Argumentxxxxxxxxpredictive
329Argumentxxxxpredictive
330Argumentxxxxxxxxxpredictive
331Argumentxxxxx_xxxx_xxxxpredictive
332Argumentxxxx_xx/xxxxxxpredictive
333Argumentxxxx_xxpredictive
334Argumentxxxxxxxxpredictive
335Argumentxxxxxxpredictive
336Argumentxxxxxxpredictive
337Argumentxxxxxxx_xxpredictive
338Argumentx_xxpredictive
339Argumentxxxxxpredictive
340Argumentxxxxxxxxpredictive
341Argumentxxx_xxxxpredictive
342Argumentxxxxxxxpredictive
343Argumentxxxxxxpredictive
344Argumentxxxxxxxxxxpredictive
345Argumentxxxx_xxxxpredictive
346Argumentxxxxxpredictive
347Argumentxxxxxpredictive
348Argumentxxxxxx/xxxxxpredictive
349Argumentxxxxxxpredictive
350Argumentxxxxxxx_xxxxxpredictive
351Argumentxxxxxxxpredictive
352Argumentxxxxxxx_xxxxpredictive
353Argumentxxxxxxxpredictive
354Argumentxxxxxxpredictive
355Argumentxxxxxxxxpredictive
356Argumentxxxxxxxxxpredictive
357Argumentxxxpredictive
358Argumentxxxxxxxxxxxxpredictive
359Argumentxxxpredictive
360Argumentxxxxxxxxpredictive
361Argumentxxxxxxxxxxxpredictive
362Argumentxxxxpredictive
363Argumentxxxpredictive
364Argumentxxxxpredictive
365Argumentxxxxxxxxpredictive
366Argumentxxxxxxxx/xxxxpredictive
367Argumentxxxxpredictive
368Argumentxxxxpredictive
369Argumentxxxxxpredictive
370Argumentxxxpredictive
371Argumentxxpredictive
372Argumentxxxx/xxxxx/xxxxpredictive
373Input Value../predictive
374Input Value../..predictive
375Input Value/xx *predictive
376Input Valuex\"><xxxxxx>xxxxx(x)</xxxxxx>predictive
377Input Value::$xxxxx_xxxxxxxxxxpredictive
378Input Value<xxxxxx>xxxxx(xxxxxxxx.xxxxxx);</xxxxxx>predictive
379Input Valuexxxxxx=xxx&xxxxxxxx=xxxxxxx.*predictive
380Input Valuexxxxxxxx.+xxxpredictive
381Input Value…/.predictive
382Network Portxxx xxxxxx xxxxpredictive

参考 (3)

The following list contains external sources which discuss the actor and the associated activities:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!