Houdini 解析

IOB - Indicator of Behavior (523)

タイムライン

言語

en438
es26
de24
zh8
ru6

国・地域

us290
de18
es8
ru6
fr4

アクター

アクティビティ

関心

タイムライン

タイプ

ベンダー

製品

Mozilla Firefox8
Microsoft Windows8
Mozilla Firefox ESR6
Mozilla Thunderbird6
PHP6

脆弱性

#脆弱性BaseTemp0day本日修復EPSSCTICVE
1PHP phpinfo クロスサイトスクリプティング4.33.9$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.021010.04CVE-2007-1287
2Lars Ellingsen Guestserver guestbook.cgi クロスサイトスクリプティング4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.001690.07CVE-2005-4222
3All Enthusiast Inc Reviewpost Php Pro showproduct.php SQLインジェクション7.37.0$0-$5k$0-$5kNot DefinedOfficial Fix0.005010.00CVE-2004-2175
4DZCP deV!L`z Clanportal config.php 特権昇格7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.009430.55CVE-2010-0966
5PHP Link Directory Administration Page index.html クロスサイトスクリプティング4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.003740.34CVE-2007-0529
6PhotoPost PHP Pro showproduct.php SQLインジェクション9.89.4$0-$5k$0-$5kNot DefinedOfficial Fix0.002760.04CVE-2004-0250
7Esoftpro Online Guestbook Pro ogp_show.php SQLインジェクション7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.001080.41CVE-2009-4935
8Gempar Script Toko Online shop_display_products.php SQLインジェクション7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.001000.02CVE-2009-0296
9TikiWiki tiki-register.php 特権昇格7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.010091.30CVE-2006-6168
10LogicBoard CMS away.php Redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable0.000002.08
11ampleShop category.cfm SQLインジェクション7.37.3$0-$5k$0-$5kNot DefinedUnavailable0.006210.02CVE-2006-2038
12AUO SunVeillance Monitoring System Access Control Picture_Manage_mvc.aspx 特権昇格8.58.4$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.250880.02CVE-2019-12719
13MGB OpenSource Guestbook email.php SQLインジェクション7.37.3$0-$5k$0-$5kHighUnavailable0.013021.06CVE-2007-0354
14FLDS redir.php SQLインジェクション7.37.3$0-$5k$0-$5kHighUnavailable0.002030.03CVE-2008-5928
15Squitosoft Squito Gallery photolist.inc.php メモリ破損7.37.3$0-$5k$0-$5kNot DefinedNot Defined0.013710.04CVE-2005-2258
16SourceCodester Employee and Visitor Gate Pass Logging System GET Parameter view_designation.php SQLインジェクション7.16.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.002200.00CVE-2023-2090
17bodymen 特権昇格6.36.2$0-$5k$0-$5kNot DefinedNot Defined0.000950.00CVE-2022-25296
18Microsoft IIS クロスサイトスクリプティング5.24.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.005480.14CVE-2017-0055
19SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php 特権昇格6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000450.03CVE-2024-1875
20Canon Satera LBP670C CPCA Color LUT Resource Download Process メモリ破損9.89.8$0-$5k$0-$5kNot DefinedNot Defined0.001250.03CVE-2023-6234

IOC - Indicator of Compromise (26)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIPアドレスHostnameアクターキャンペーンIdentifiedタイプ信頼度
12.59.254.111Houdini2023年09月06日verified
25.181.80.127ip-80-127-bullethost.netHoudini2023年12月01日verified
341.216.188.103Houdini2023年09月26日verified
445.90.222.12545-90-222-125-hostedby.bcr.hostHoudini2023年05月19日verified
545.90.222.13145-90-222-131-hostedby.bcr.hostHoudini2023年08月08日verified
646.183.223.46ip-223-46.dataclub.infoHoudini2024年04月12日verified
7XX.XXX.XXX.XXxx-xxx-xx.xxxxxxxx.xxxxXxxxxxx2024年03月11日verified
8XX.XXX.XXX.XXXxxxxxx2022年06月13日verified
9XX.XXX.XXX.XXXxxxxxx2021年10月09日verified
10XX.XX.XX.XXxxxxx.xxxxxxx-xx.xxxXxxxxxx2023年09月19日verified
11XX.XX.XXX.XXXxxxxxxxxxxxx.xxxxxxx.xxxxxXxxxxxx2023年06月26日verified
12XX.XX.XXX.XXXxxx.xxx-xx-xx-xxx.xxxxxxxxx.xxxx-xxx.xxxXxxxxxx2023年09月26日verified
13XX.X.XXX.XXxx.xxx-xx-x-xxx.xxxxxxxxx.xxxx-xxx.xxxXxxxxxx2023年09月26日verified
14XX.XXX.XX.XXXXxxxxxx2024年04月19日verified
15XXX.XX.XXX.XXXxxxxxx2023年04月02日verified
16XXX.XXX.XXX.XXXxxxxxx2023年07月03日verified
17XXX.XXX.XXX.XXXxx-xxx-xxx.xxxxxxxx.xxXxxxxxx2023年06月15日verified
18XXX.XXX.XXX.XXXXxxxxxx2023年06月15日verified
19XXX.XXX.XXX.XXXXxxxxxx2023年06月05日verified
20XXX.XXX.XXX.XXXXxxxxxx2023年08月17日verified
21XXX.XX.XXX.XXXxxx-xxx-xx-xxx.xxxxxxx-xxxXxxxxxx2023年06月15日verified
22XXX.XXX.XXX.XXXxxxxxx2022年06月15日verified
23XXX.X.XX.XXxxxxxx2022年07月06日verified
24XXX.X.XX.XXXxxxxxx2022年06月27日verified
25XXX.XXX.XXX.XXxxxxxx2022年06月13日verified
26XXX.XX.XXX.XXXxxxxxxxxxx.xxxxxxxxxxxxxxxx.xxxXxxxxxx2023年10月27日verified

TTP - Tactics, Techniques, Procedures (19)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (266)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDクラスIndicatorタイプ信頼度
1File/Admin/add-student.phppredictive
2File/admin/article.phppredictive
3File/admin/inquiries/view_details.phppredictive
4File/Admin/login.phppredictive
5File/admin/maintenance/view_designation.phppredictive
6File/admin/transactions/update_status.phppredictive
7File/admin/uesrs.php&action=type&userrole=Admin&userid=3predictive
8File/AdminDirpredictive
9File/api/user/password/sent-reset-emailpredictive
10File/carbon/ndatasource/validateconnection/ajaxprocessor.jsppredictive
11File/cgi-bin/system_mgr.cgipredictive
12File/control/register_case.phppredictive
13File/coreframe/app/order/admin/index.phppredictive
14File/debug/pprofpredictive
15File/dev/snd/seqpredictive
16File/etc/sudoerspredictive
17File/forum/away.phppredictive
18File/index.jsp#settingspredictive
19File/products/details.asppredictive
20File/public/login.htmpredictive
21File/showfile.phppredictive
22File/st_reg.phppredictive
23File/uncpath/predictive
24File/usr/www/ja/mnt_cmd.cgipredictive
25File/Wedding-Management/package_detail.phppredictive
26Fileadclick.phppredictive
27Fileadd-testimonial.phppredictive
28Fileadd_edit_user.asppredictive
29Fileadmin-ajax.phppredictive
30Fileadmin/abc.phppredictive
31Fileadmin/conf_users_edit.phppredictive
32Fileadmin/news.phppredictive
33Filexxxxxxxxx.xxxpredictive
34Filexxxxxxxxxxxxx/xxxxxxxxxx/xxx_xxxxx/xxxxxxx/xxxxx.xxxpredictive
35Filexxxxxxxxxx/xxxxx/xxxxxxx_xxxxx/xxxxxxxxxxxx.xxxpredictive
36Filexxxx\xxxxx\xxxxxxxxxx\xxxxxxx\xxxxxxxxxxxxxxxx.xxxpredictive
37Filexxxxxxxx.xxxxxxx.xxxpredictive
38Filexxxx.xxx.xxxpredictive
39Filexxxxxxxxxx.xxxpredictive
40Filex:\xxxxxxx\xxxxxxxx\xxxxxx\xxxpredictive
41Filexx.xpredictive
42Filexxxx_xxxxxxx.xxxpredictive
43Filexxx.xxxpredictive
44Filexxxxxxxxxx.xxxpredictive
45Filexxxxxxxx.xxxpredictive
46Filexxxxxxxx.xxxpredictive
47Filexxx-xxx/xxxxx.xxxpredictive
48Filexxxxx.xxxxx.xxxpredictive
49Filexxx/xx/xxxxxxxxx/xxxxxxx/xxxxxxxxxxx.xxxxpredictive
50Filexxxxxxxx_xxxxxxxxxxxxxxxxx.xxxpredictive
51Filexxx\xxxxxxxx\xxxxx\xxxxxx\xxx\xxxxxxxxxx.xxxxpredictive
52Filexxxxxx.xxxpredictive
53Filexxxxxxxx.xxxpredictive
54Filexxxxx.xxxpredictive
55Filexxxx/xxxxxxxxxxxxxxx.xxxpredictive
56Filexxxxxx/xx-xxxxx-xxxxxxxxx!xxxxxxx.xxxxxxpredictive
57Filexxxxxx.xxxpredictive
58Filexxxxxx.xxxpredictive
59Filexxxxxxxx.xxxpredictive
60Filexxxxxxx/xxxx/xxxx/xxxx_xxx.xpredictive
61Filexxxxxxx/xxxx/xxxx.xpredictive
62Filexxxxx.xpredictive
63Filexxxxx/xx/xxxxx.xxpredictive
64Filexxxxx.xxxpredictive
65Filexxx/xxxx/xxxxxx/xxxxxx_xxxxxxx.xpredictive
66Filexxxxxxxxxxx.xxxxx.xxxpredictive
67Filexxxxxxxxxxx/xxxxx.xxxpredictive
68Filexxxxxxxxx.xxxpredictive
69Filexx.xxxxx.xxxpredictive
70Filexxxxxxx.xxxpredictive
71Filexxxxxxxxx.xxxpredictive
72Filexxxx.xxxpredictive
73Filexxxxxxxxx.xxxpredictive
74Filexxxxxxxxxx.xxxpredictive
75Filexxxxxxxxx.xxxpredictive
76Filexxx/xxxxxx.xxxpredictive
77Filexxxxxxxx/xxxx.xxxpredictive
78Filexxxxx.xxxpredictive
79Filexxxxx.xxxpredictive
80Filexxxxx.xxxpredictive
81Filexxxxx.xxxxpredictive
82Filexxxxx.xxxpredictive
83Filexxxxxxx.xxxpredictive
84Filexxxxxxxxxxxxxxx.xxpredictive
85Filexxxx_xxxx.xxxpredictive
86Filexxx/xxxxx/xxxxxxxx/xxxx/xxxxxxx_xxxxxxxxx.xxpredictive
87Filexxxxx/xxxxxxxx.xpredictive
88Filexxxxxxxxx.xxpredictive
89Filexxxxxxxxxxxx/xxxxxxxx.xpredictive
90Filexxxxxxxxxxxx/xx_xxxxxx.xpredictive
91Filexxxxx.xxxpredictive
92Filexxxxx.xxxpredictive
93Filexxxxx.xxxpredictive
94Filexxxxx.xxxxpredictive
95Filexxxxxxx.xxxxpredictive
96Filexxxxxx.xxxpredictive
97Filexxxxxx/xxxx.xxxpredictive
98Filexxxx/xxxxx.xxxpredictive
99Filexxxxxxx.xxxpredictive
100Filexxx_xxxx.xxxpredictive
101Filexxxxxxx.xxxpredictive
102Filexxxxxxxx.xxxpredictive
103Filexxxxxxxx_xxxxxx.xxxpredictive
104Filexxx.xxpredictive
105Filexxxxxxx.xxxx_xxxpredictive
106Filexxxxxxxxx.xxx.xxxpredictive
107Filexxxxxxx.xxxpredictive
108Filexxxxxxx.xxxpredictive
109Filexxxx_xxx.xpredictive
110Filexxxxxxx_xxxxxx_xxx.xxxxpredictive
111Filexxxxxx.xxxpredictive
112Filexxxxxxxx.xxxpredictive
113Filexxxxx_xxx.xxxpredictive
114Filexxxx.xxxpredictive
115Filexxxxxxxxxxxxxx.xxxpredictive
116Filexxxxx.xxxpredictive
117Filexxxxxxxxxxxx_xxxxxxxx.xxx.xxxpredictive
118Filexxxxxx.xxxpredictive
119Filexxxxxxx_xxx_xxxxx_xxxxxx.xxxxpredictive
120Filexxxxxxxxxx_xxxxx.xxxxxxpredictive
121Filexxx.xxxpredictive
122Filexxxx/xxx/xxx_xxxx.xpredictive
123Filexxxxxxx_xxxxxx_xxxxxxxx.xxxpredictive
124Filexxxx_xxxxxxxxx.xxxpredictive
125Filexxxxx.xxxpredictive
126Filexxxxx.xxxpredictive
127Filexxxx.xxxpredictive
128Filexxxxxxxxxxxxx.xxxpredictive
129Filexxxxxxxxxxxx.xxxpredictive
130Filexxxxxxx.xxxpredictive
131Filexxxxxxxxxxxxxxxx.xxxpredictive
132Filexxxxxxxxxxxxxx.xxxpredictive
133Filexxxxxxxxxxxxxxx.xxxpredictive
134Filexxxx_xxxxxxx_xxxxxxxx.xxxpredictive
135Filexxxxxxxx.xxx/xxxxxx.xxx/xxxxxxxx.xxxpredictive
136Filexxxxxxxxxxx.xxxpredictive
137Filexxx/xxxxxxx.xpredictive
138Filexxxx-xxxxxxx/xxxxx.xxxpredictive
139Filexxxx_xxxxxxxxx.xxxpredictive
140Filexxxx-xxxxxxxx.xxxpredictive
141Filexxxxxx.xxxxxxx.xxxxxxxxxxxxxxxxxxxxxxxxpredictive
142Filexxxxxxxxxxxxxxxx.xxxpredictive
143Filexxxxx/xxxxxxxx-xxxxxxxxx.xxxpredictive
144Filexxxx/xxxxxx.xxxxpredictive
145Filexx_xxxx.xxxpredictive
146Filexxxxxxxx.xxxpredictive
147Filexxxxxxx.xxxpredictive
148Filexxxxxxx/xxxxxxxxx/xxxxxxxxxxx.xxxpredictive
149Filexx-xxxxx/xxxxxxx-xxxxxxx.xxx?xxxx=xxxxxxx_xxxxxx_xxxxxxpredictive
150Filexx-xxxxx.xxxpredictive
151Filexxxxxxxxxxxx.xxxpredictive
152File~/xxxxx/xxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxxxxxx/xxxxxxxx.xxxpredictive
153Library/xxx/xxx/xxx/xxx_xxxxxxxxxx/xxx_xxxx.xxxpredictive
154Libraryxxx/xxxx/xxxxxxx/xxxxxxxx_xxxxxxx/xxxxxxxx.xxpredictive
155Libraryxxx/xxxxxxx.xxx.xxxpredictive
156Libraryxxxxxxxxxxxx.xxxpredictive
157Libraryxxxxxxxx.xxxpredictive
158Libraryxxx/xxx/xxxx/predictive
159Argument$_xxxxxx['xxxxx_xxxxxx']predictive
160Argument-xpredictive
161Argumentx_xxpredictive
162Argument?xxxx_xxxx=xxxxxxx.xxx/xxxx=xxxxxx/xxx=xxx+/xxx/.xxxxxxxx/xxxxxxx=//xxxxxxxxxxxxxx.xxx=xpredictive
163Argumentxxxxxxxpredictive
164Argumentxxxxxxpredictive
165Argumentxxxxxxxxxpredictive
166Argumentxxxxxxxxpredictive
167Argumentxxxxxxxxxxxpredictive
168Argumentxxxx_xxx_xxxxpredictive
169Argumentxxxpredictive
170Argumentxxxxxxxxxpredictive
171Argumentxxxxxxxxpredictive
172Argumentxxxxxxxx_xxpredictive
173Argumentxxxxxpredictive
174Argumentxxxxxpredictive
175Argumentxxx_xxpredictive
176Argumentxxxpredictive
177Argumentxxxx_xxpredictive
178Argumentxxxxxxxxxxxxpredictive
179Argumentxxxxxxpredictive
180Argumentxxxxxxxxpredictive
181Argumentxxxxxxxx_xxxxxx/xxxxxxxx_xxxx/xxxxxxxx_xxxxxxxx/xxxxxxxx_xxxxpredictive
182Argumentxxxxxxxxxxpredictive
183Argumentxxxxxxxxxxx/xxxxxxxx/xxxxx/xxxxxxxxpredictive
184Argumentxxxxpredictive
185Argumentxxxxxxxxxxpredictive
186Argumentxxxxxxxpredictive
187Argumentxxxxxxpredictive
188Argumentxxxxxpredictive
189Argumentxxxxx_xxxx_xxxxpredictive
190Argumentxx_xxxxxxxpredictive
191Argumentxxxpredictive
192Argumentxxxxpredictive
193Argumentxxxxxxxpredictive
194Argumentxxxxpredictive
195Argumentxxxxpredictive
196Argumentxxxxxxxxpredictive
197Argumentxxpredictive
198Argumentxxpredictive
199Argumentxx/xxxxx/xxxxxxx_xxpredictive
200Argumentxxxxxxxxxxpredictive
201Argumentxxxxxxxxxpredictive
202Argumentxxxxxxxxpredictive
203Argumentxxxx_xxpredictive
204Argumentxxxxxpredictive
205Argumentxxxxpredictive
206Argumentxxxxxx/xxpredictive
207Argumentxxxxpredictive
208Argumentxxxpredictive
209Argumentxxxxxxxxpredictive
210Argumentxxxxxxxxxpredictive
211Argumentxxxpredictive
212Argumentxxxpredictive
213Argumentxxxxxxxxx_xxxxxxxx_xxxxpredictive
214Argumentxxxpredictive
215Argumentxxxxpredictive
216Argumentxxxx/xxxxxxxxxxx/xxxxxxxxxpredictive
217Argumentxxxxxpredictive
218Argumentxxxpredictive
219Argumentxxxx_xxpredictive
220Argumentxxxxpredictive
221Argumentxxxxxxxxpredictive
222Argumentxxxx_xx_xx_xxxpredictive
223Argumentxxxxxxx_xpredictive
224Argumentxxxxxxxxxpredictive
225Argumentxxxpredictive
226Argumentxxxxxpredictive
227Argumentxxxxxxxxpredictive
228Argumentxx_xxxxpredictive
229Argumentxxxxxxpredictive
230Argumentxxxxxxx_xxpredictive
231Argumentxxxxxpredictive
232Argumentxxxxxxx/xxxxxpredictive
233Argumentxxxxxxxxxpredictive
234Argumentxxxxxxxpredictive
235Argumentxxxxxxxxxxxxpredictive
236Argumentxxxxxxpredictive
237Argumentxxxxxxx-xxxxpredictive
238Argumentxxxpredictive
239Argumentxxxxxxpredictive
240Argumentxxpredictive
241Argumentxxxxxxxxxpredictive
242Argumentxxxpredictive
243Argumentxxxxxxxxxpredictive
244Argumentxxxxxxpredictive
245Argumentxxxxxxxxpredictive
246Argumentxxxxxxxxxxpredictive
247Argumentxxxxpredictive
248Argumentxxxxx/xxxx_xx/xxxxxx_xxxx/xxxxx/xxxx_xxxx/xxxx_xxxxx/xxxxx_xxxx/xxxxxxxxxxx/xxxxxxx_xxxx/xxxxxxx_xxxx/xxxxxxxx_xxxxxx/xxxxx_xxxx/xxxxxxpredictive
249Argumentxxxxx_xxpredictive
250Argumentxxxxxxxxxx_xxpredictive
251Argumentxxxxxxxxxxxpredictive
252Argumentxxxxxx_xxpredictive
253Argumentxxxxxx_xxxxpredictive
254Argumentxxxpredictive
255Argumentxxxxxxpredictive
256Argumentxxxxxxxxpredictive
257Argumentxxxx_xxpredictive
258Argumentxxxx/xxxxx/xxxxpredictive
259Argument\xxxxxx\predictive
260Input Value-xpredictive
261Input Value../../xxx-xxx/xxxpredictive
262Input Value./xxx/predictive
263Input Value<xxxx<xxxxxx>xx>xxxxx(x)</xxxx</xxxxxx>xx>predictive
264Input Valuexxxxxxxx+'@xxxpredictive
265Pattern/xxxpredictive
266Network Portxxx/xx (xxx xxxxxxxx)predictive

参考 (12)

The following list contains external sources which discuss the actor and the associated activities:

Samples (1)

The following list contains associated samples:

Might our Artificial Intelligence support you?

Check our Alexa App!