LazyScripter 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (209)

言語

en	164
fr	28
de	10
pl	4
es	2

国・地域

us	182
ch	8
cn	4
fr	4
pl	2

アクター

LazyScripter	3
NjRAT	2
AsyncRAT	2
ElectrumDosMiner	1
SocGholish	1

関心

タイプ

Not Defined	44
Content Management System	12
Operating System	8
Firewall Software	6
Network Encryption Software	4

ベンダー

Not Defined	30
Microsoft	10
Apple	4
D-Link	4
Itechscripts	4

製品

Microsoft Windows	6
Itechscripts iTechBids	4
baigo CMS	4
Next.js	2
Apple iOS	2

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash 情報の漏洩	5.3	5.2	$5k-$25k	計算中	High	Workaround	0.02016	0.00	CVE-2007-1192
2	DZCP deV!L`z Clanportal config.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	1.17	CVE-2010-0966
3	Gempar Script Toko Online shop_display_products.php SQLインジェクション	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00100	0.07	CVE-2009-0296
4	Ecommerce Online Store Kit shop.php SQLインジェクション	9.8	9.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03763	0.00	CVE-2004-0300
5	WoltLab Burning Book addentry.php SQLインジェクション	7.3	6.8	$0-$5k	$0-$5k	Functional	Unavailable	0.00804	0.03	CVE-2006-5509
6	FiberHome HG2201T telnet.cgi 特権昇格	8.0	8.0	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00609	0.00	CVE-2019-17186
7	Google Chrome Utility Process 競合状態	9.8	9.4	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00801	0.07	CVE-2011-3961
8	DataLynx suGuard 特権昇格	5.9	5.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00042	0.00	CVE-1999-0388
9	Dcscripts Dcshop HTTP GET Request auth_user_file.txt Password 情報の漏洩	5.3	5.2	$0-$5k	$0-$5k	Not Defined	Workaround	0.00755	0.00	CVE-2001-0821
10	MidiCart PHP Shopping Cart item_show.php SQLインジェクション	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.00
11	Linksys WVC11B main.cgi クロスサイトスクリプティング	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01569	0.00	CVE-2004-2508
12	Asternic Flash Operator Panel User Control Panel 特権昇格	7.5	7.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00214	0.04	CVE-2018-5694
13	Contenido Contendio allow_url_fopen 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00575	0.00	CVE-2005-4132
14	Microsoft Windows Remote Desktop/Terminal Services Web Connection 弱い認証	6.3	6.2	$25k-$100k	$0-$5k	Not Defined	Workaround	0.00000	0.00
15	Ilohamail クロスサイトスクリプティング	4.3	4.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.08
16	Microsoft IIS Error Message クロスサイトスクリプティング	6.3	6.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00169	0.05	CVE-2000-1104
17	Microsoft IIS Error Message クロスサイトスクリプティング	4.2	4.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03911	0.04	CVE-2003-0223
18	Adobe ColdFusion クロスサイトスクリプティング	4.3	3.9	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01479	0.00	CVE-2007-0817
19	SourceCodester Garage Management System createUser.php 特権昇格	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00307	0.15	CVE-2022-2578
20	D-Link IP Cameras rtpd.cgi 構成ミス	9.8	8.8	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.90114	0.03	CVE-2013-1599

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	Identified	タイプ	信頼度
1	45.91.92.112		LazyScripter	2022年03月11日	verified	高
2	66.29.130.204	server1.gowaymevps.xyz	LazyScripter	2022年03月11日	verified	高
3	103.73.64.115		LazyScripter	2022年03月11日	verified	高
4	XXX.XXX.X.XX		Xxxxxxxxxxxx	2022年03月23日	verified	高
5	XXX.XXX.XXX.XXX		Xxxxxxxxxxxx	2022年03月11日	verified	高
6	XXX.XXX.XXX.XX		Xxxxxxxxxxxx	2021年05月31日	verified	高
7	XXX.XXX.XXX.XX		Xxxxxxxxxxxx	2022年03月11日	verified	高
8	XXX.XX.XXX.XXX		Xxxxxxxxxxxx	2022年03月11日	verified	高
9	XXX.XXX.XXX.XXX	xxxx.xxxxxxx.xxx	Xxxxxxxxxxxx	2021年05月31日	verified	高
10	XXX.XX.XXX.XXX		Xxxxxxxxxxxx	2022年03月11日	verified	高
11	XXX.XXX.XXX.XX		Xxxxxxxxxxxx	2021年05月31日	verified	高

TTP - Tactics, Techniques, Procedures (13)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-22, CWE-23	Path Traversal	predictive	高
2	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	高
3	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	高
4	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
5	TXXXX	CAPEC-136	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
6	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
7	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
8	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
9	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
10	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
11	TXXXX.XXX	CAPEC-59	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
12	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高
13	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	高

IOA - Indicator of Attack (96)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/catalog/admin/categories.php?cPath=&action=new_product	predictive	高
2	File	/etc/passwd	predictive	中
3	File	/inc/HTTPClient.php	predictive	高
4	File	/php_action/createUser.php	predictive	高
5	File	/var/WEB-GUI/cgi-bin/telnet.cgi	predictive	高
6	File	addentry.php	predictive	中
7	File	admin.php	predictive	中
8	File	admin/admin.shtml	predictive	高
9	File	Admin/ADM_Pagina.php	predictive	高
10	File	admin/editcatalogue.php	predictive	高
11	File	admin/menus/edit.php	predictive	高
12	File	xxxxx.xxx	predictive	中
13	File	xx_xxxxxxx/xxxxx.xxx?x=xxx&x=xxxxxxx	predictive	高
14	File	xxxxxxxxxx.xxx	predictive	高
15	File	xxxxxxxx.xxx	predictive	中
16	File	xxxxxxxx_xxxx.xxx	predictive	高
17	File	xxx_xxxx.x	predictive	中
18	File	xxxxxxxxx.xxx	predictive	高
19	File	xxxxxx-xxxxx	predictive	中
20	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	高
21	File	xxxxxx.xxx	predictive	中
22	File	xxxxxx.xxx	predictive	中
23	File	xxxxx_xxx_xxxxx.xxx	predictive	高
24	File	xxxxxxxxxx-xx-xxxxxx/xxxx/xxxx.xxx	predictive	高
25	File	xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxx.xxx	predictive	高
26	File	xxx/xxxxxx.xxx	predictive	高
27	File	xxxxxxx/xxxx_xxxxxxxx.xxxxx.xxx	predictive	高
28	File	xxxxx.xxx	predictive	中
29	File	xxxxxxx.xxx	predictive	中
30	File	xxxxxxxxxx.xxx	predictive	高
31	File	xxxx_xxxx.xxx	predictive	高
32	File	xxxxx_xx.xxxx	predictive	高
33	File	xxxxxxxxxx/xxxxxxx.x	predictive	高
34	File	xxxx.xxx	predictive	中
35	File	xxxxxxxx.xxx	predictive	中
36	File	xxxxxxxx.xxx	predictive	中
37	File	xxx_xxxx.xxx	predictive	中
38	File	xxx_xxxx.xxx.xxx	predictive	高
39	File	xxxxxx.xxx/xxxx_xxxx_xxxx.xxx	predictive	高
40	File	xxxxxxxxxx.xxx	predictive	高
41	File	xxxxxxxx-x.xx	predictive	高
42	File	xxxx/xxxxxxx/xxxxxxxxxxxxx_xxx.xxx	predictive	高
43	File	xxxxxxxx.xxx	predictive	中
44	File	xxxx.xxx	predictive	中
45	File	xxxxxxxxxxxxx.xxx	predictive	高
46	File	xxxxxxxxx.xxx	predictive	高
47	File	xxxxxxxxxxxxxxxx.xxx	predictive	高
48	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	高
49	File	xxxxx_xxxxx.xxx	predictive	高
50	File	xxxxxx/xxxxx/xxxx_xxxxxxx.xxx	predictive	高
51	File	xxxxxx.xxx	predictive	中
52	File	xxxx_xxxxx.xxx	predictive	高
53	File	xxx/xxx/xxx-xxx/xxxx.xxx	predictive	高
54	File	xxxx.xxx	predictive	中
55	File	xxxxxxxx.xxx	predictive	中
56	File	xxxxxxx.xxx	predictive	中
57	Library	xxxxxx[xxxxxx_xxxx	predictive	高
58	Library	xxxxxx.xxx	predictive	中
59	Library	xxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
60	Library	xxx/xx_xxx.x	predictive	中
61	Argument	(xxxxxx)	predictive	中
62	Argument	xxx_xx	predictive	低
63	Argument	xxxxxxxx	predictive	中
64	Argument	xx_xxxx_xxxx	predictive	中
65	Argument	xxx	predictive	低
66	Argument	xxxxx	predictive	低
67	Argument	xxx_xx	predictive	低
68	Argument	xxx	predictive	低
69	Argument	xxxx_xx	predictive	低
70	Argument	xxxxxxx	predictive	低
71	Argument	xxxxxx[xxxxxx_xxxx]	predictive	高
72	Argument	xxxxxxxx_xxxxxx/xxxxxxxx_xxxx/xxxxxxxx_xxxxxxxx/xxxxxxxx_xxxx	predictive	高
73	Argument	xxxxxx_xxxx	predictive	中
74	Argument	xxxxxxx	predictive	低
75	Argument	xxxxxxxx	predictive	中
76	Argument	xxxxx	predictive	低
77	Argument	xx	predictive	低
78	Argument	xx	predictive	低
79	Argument	xxxx_xx	predictive	低
80	Argument	xxxxx_xxxx	predictive	中
81	Argument	xxxxxx	predictive	低
82	Argument	xxxx_xxxx	predictive	中
83	Argument	xxx[xxxx][xx_xxxx_xxxx]	predictive	高
84	Argument	xxxx_xx	predictive	低
85	Argument	xxxx	predictive	低
86	Argument	xxxxxx_xxxx	predictive	中
87	Argument	xxxxxxxx	predictive	中
88	Argument	xxxxxx_xxxx[]	predictive	高
89	Argument	xxxxxx	predictive	低
90	Argument	xxxxx	predictive	低
91	Argument	xxxx	predictive	低
92	Argument	xxxxxxxx	predictive	中
93	Argument	x-xxxx-xxxxx	predictive	中
94	Input Value	%xxxxxx+-x+x+xx.x.xx.xxx%xx%xx	predictive	高
95	Input Value	//xxx.xxxxxxx.xxx	predictive	高
96	Pattern	\|xx xx xx\|	predictive	中

参考 (4)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!