Machete 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (128)

言語

en	106
ru	8
fr	4
de	2
zh	2

国・地域

us	74
ru	16
ca	10
de	2
se	2

アクター

Machete	7
Donot	1
Ponystealer	1
RagnarLocker	1
Bashlite	1

関心

タイプ

Not Defined	44
Content Management System	12
Programming Language Software	8
Operating System	8
Web Browser	8

ベンダー

Not Defined	36
Apple	10
Oracle	6
Google	4
PhotoPost	4

製品

Mosets Tree	4
Google Chrome	4
Apple iOS	4
Apple iPadOS	4
Microsoft Windows	4

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	WordPress Access Restriction user-new.php 特権昇格	7.5	7.4	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00372	0.05	CVE-2017-17091
2	Apple iOS/iPadOS Kernel 情報の漏洩	3.3	3.2	$5k-$25k	$0-$5k	High	Official Fix	0.00778	0.00	CVE-2020-27950
3	Joe Depasquale Bannermatic Ban File 情報の漏洩	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00231	0.03	CVE-2002-2342
4	PhotoPost PHP Pro showproduct.php SQLインジェクション	9.8	9.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00276	0.06	CVE-2004-0250
5	Skrypty Ppa Gallery functions.inc.php メモリ破損	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02429	0.00	CVE-2005-2199
6	Lighthouse Development Squirrelcart cart_content.php 特権昇格	6.5	5.9	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.02731	0.04	CVE-2006-2483
7	Oracle GoldenGate サービス拒否	7.5	7.4	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.01883	0.00	CVE-2021-3749
8	Microsoft Windows Asynchronous RPC Request 特権昇格	9.0	8.6	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.90541	0.01	CVE-2013-3175
9	vBulletin visitormessage.php 特権昇格	7.5	7.4	$0-$5k	$0-$5k	High	Unavailable	0.03104	0.04	CVE-2014-9463
10	phpBB startup.php クロスサイトスクリプティング	4.3	4.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00287	0.04	CVE-2015-1431
11	Microsoft Edge 未知の脆弱性	4.3	4.2	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00063	0.00	CVE-2023-36026
12	PHPizabi index.php ディレクトリトラバーサル	6.5	5.7	$0-$5k	$0-$5k	Unproven	Unavailable	0.00826	0.05	CVE-2008-3723
13	Pharmacy Sales and Inventory System manage_user.php SQLインジェクション	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00172	0.00	CVE-2022-30407
14	Hospital Patient Record Management System 特権昇格	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00075	0.00	CVE-2022-24232
15	Zentrack index.php ディレクトリトラバーサル	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.00
16	Zentrack index.php 特権昇格	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.03
17	PhotoPost PhotoPost vBGallery File Upload upload.php 特権昇格	6.3	5.8	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.00546	0.03	CVE-2008-7088
18	Gempar Script Toko Online shop_display_products.php SQLインジェクション	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00100	0.07	CVE-2009-0296
19	Cutephp CuteNews URL comments.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01849	0.01	CVE-2003-1240
20	myWebland myEvent event.php 特権昇格	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.40476	0.00	CVE-2006-1890

IOC - Indicator of Compromise (10)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	Identified	タイプ	信頼度
1	31.207.44.72		Machete	2022年03月31日	verified	高
2	69.64.43.33	falcon207.startdedicated.com	Machete	2020年12月17日	verified	高
3	XXX.XX.XXX.XX	xxx-xx-xxx-xx.xxx.xxxx.xx	Xxxxxxx	2020年12月17日	verified	高
4	XXX.XX.XXX.XXX	xxxxx.xx-xxx-xx-xxx.xxx	Xxxxxxx	2020年12月17日	verified	高
5	XXX.XX.XXX.XX		Xxxxxxx	2020年12月17日	verified	高
6	XXX.XX.X.XXX	xxxxx.xx-xxx-xx-x.xxx	Xxxxxxx	2020年12月17日	verified	高
7	XXX.X.X.XXX	xxxxxx.xxx.x.x.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxxxxx	2020年12月17日	verified	高
8	XXX.XXX.XXX.XX		Xxxxxxx	2020年12月17日	verified	高
9	XXX.XX.XX.XXX	xx-xxxxx-xxxx.xxxxxxxxxx.xxx	Xxxxxxx	2020年12月17日	verified	高
10	XXX.XXX.XXX.XXX	xxxx.xxxxxxxxxxxxx.xxxx	Xxxxxxx	2020年12月17日	verified	高

TTP - Tactics, Techniques, Procedures (11)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	高
2	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	高
4	TXXXX.XXX	CAPEC-209	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	高
5	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
6	TXXXX	CAPEC-136	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
7	TXXXX	CAPEC-	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	高
8	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
9	TXXXX	CAPEC-37	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
10	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
11	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (106)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/admin/config.php?display=backup	predictive	高
2	File	/pharmacy-sales-and-inventory-system/manage_user.php	predictive	高
3	File	/proc/self/cwd	predictive	高
4	File	/Side.php	predictive	中
5	File	/textpattern/index.php	predictive	高
6	File	account.asp	predictive	中
7	File	admin.php	predictive	中
8	File	adminAttachments.php	predictive	高
9	File	adminBoards.php	predictive	高
10	File	adminPolls.php	predictive	高
11	File	al_initialize.php	predictive	高
12	File	ase.php	predictive	低
13	File	bb_usage_stats.php	predictive	高
14	File	cart_content.php	predictive	高
15	File	xxxxx.xxxxx.xxx	predictive	高
16	File	xxxxxxxx_xxxxxxxxxxxxxxxxx.xxx	predictive	高
17	File	xxxxxxx.xxx	predictive	中
18	File	xxxxxx.xxx	predictive	中
19	File	xxxxxxxx.xxx.xxx	predictive	高
20	File	xxxxx.xxx	predictive	中
21	File	xxxxxxxxxxx.xxxxx.xxx	predictive	高
22	File	xxxx_xxxxxxxx.xxx	predictive	高
23	File	xxxxxxxxx_xxx_xxxx.xxx	predictive	高
24	File	xxxx.xxx	predictive	中
25	File	xxxxxxxxxx.xxx	predictive	高
26	File	xxxxxxxxx.xxx	predictive	高
27	File	xxx/xxxxxxxxx.xxx.xxx	predictive	高
28	File	xxxxxxxx/xxxxxxxxxxxx.xxx.xxx	predictive	高
29	File	xxxxxxxx/xxxxxxx.xxx	predictive	高
30	File	xxxxx.xxx	predictive	中
31	File	xxxxx.xxx?xx=xxxxxxxxx	predictive	高
32	File	xxxx.xxx	predictive	中
33	File	xxx_xxxxxxxx.xxx	predictive	高
34	File	xxx.xxx	predictive	低
35	File	xxxxxxxx.xxx	predictive	中
36	File	xxxxxxx/xxx/xxxxx.xxx	predictive	高
37	File	xxxxxx_xx.xxx	predictive	高
38	File	xxxxxxxxx.xxx.xxx	predictive	高
39	File	xxxxxxx.xxx	predictive	中
40	File	xxxxxxxxxx.xxx	predictive	高
41	File	xxxxxxxxxxxx_xxxxxxxx.xxx.xxx	predictive	高
42	File	xxxxxxxxxx.xxxx.xxx	predictive	高
43	File	xxxxxxx_xxxxxx_xxxxxxxxxx.xxx	predictive	高
44	File	xxxxxxx_xxxxxx_xxxxxxxx.xxx	predictive	高
45	File	xxxxxx.xxx	predictive	中
46	File	xxxx.xxx	predictive	中
47	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	高
48	File	xxxxxxxx.xxx/xxxxxx.xxx/xxxxxxxx.xxx	predictive	高
49	File	xxxxxxxxxxx.xxx	predictive	高
50	File	xxxx_xxxxxxxx.xxx/xxxx_xxxx.xxx	predictive	高
51	File	xxxxx/xxxxxxxx/xxxxxxxxx.xxx	predictive	高
52	File	xxxxxx.xxx	predictive	中
53	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	高
54	File	xxxxxxx.xxx	predictive	中
55	File	xxxxxxxxxxxxxx.xxx	predictive	高
56	File	xx-xxxxx/xxxx-xxx.xxx	predictive	高
57	File	xxxxxxxxxxxx.xxx	predictive	高
58	Library	xxxxxxxx-xx.xxx	predictive	高
59	Library	xxx xxxxxxxxxx	predictive	高
60	Library	xxxx.xxx.xxx	predictive	中
61	Argument	xxxxxx	predictive	低
62	Argument	xxxx	predictive	低
63	Argument	xxxx	predictive	低
64	Argument	xxxx_xxx_xxxx	predictive	高
65	Argument	xxx	predictive	低
66	Argument	xxx_xx	predictive	低
67	Argument	xxxxxxxxxxxxxxx	predictive	高
68	Argument	xxxxxxxxxx	predictive	中
69	Argument	xxxxxx[xxx_xxxx_xxxx]	predictive	高
70	Argument	xxxxxxx	predictive	低
71	Argument	xxxxxxxx	predictive	中
72	Argument	xxxxxxxx	predictive	中
73	Argument	xx_xxxxx_xx	predictive	中
74	Argument	xx_xxxxxxx	predictive	中
75	Argument	xxxxxxxx	predictive	中
76	Argument	xxxx_xx	predictive	低
77	Argument	xxxxxxx	predictive	低
78	Argument	xxxxxxxxxxxxxx[xxxxxxxxxxxxxxxxxx]	predictive	高
79	Argument	xxxx[xxxxxxx]	predictive	高
80	Argument	xx	predictive	低
81	Argument	xxxxxxxxx	predictive	中
82	Argument	xxxx	predictive	低
83	Argument	xxxxxx	predictive	低
84	Argument	xxxx_xxxx	predictive	中
85	Argument	xxxxxxx	predictive	低
86	Argument	xxx_xxxx_xxxx	predictive	高
87	Argument	xx_xxxxxxxx	predictive	中
88	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	高
89	Argument	xxxxxxx_xxxx	predictive	中
90	Argument	xxxxxx_xxxxxx[xxxxxx_xxxx]	predictive	高
91	Argument	xxxxx	predictive	低
92	Argument	xxxx	predictive	低
93	Argument	xxxx_xx_xx_xxx	predictive	高
94	Argument	xxxxxxxxx	predictive	中
95	Argument	xxxxx_xxxx_xxxx	predictive	高
96	Argument	xxxxx	predictive	低
97	Argument	xxxxxxxxxx[x]	predictive	高
98	Argument	xx_xxxx	predictive	低
99	Argument	xxxxxx_xxxx	predictive	中
100	Argument	xxxxx	predictive	低
101	Argument	xxxxxxxxxx	predictive	中
102	Argument	xxxxxxxx	predictive	中
103	Input Value	%xxxxxx+-x+x+xx.x.xx.xxx%xx%xx	predictive	高
104	Input Value	\xxx../../../../xxx/xxxxxx	predictive	高
105	Pattern	xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx	predictive	高
106	Pattern	\|xx xx xx xx\|	predictive	高

参考 (4)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!