Saint Bot 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (205)

言語

en	178
fr	14
pl	4
de	4
it	2

国・地域

us	62
fr	14
ru	12
it	2
es	2

アクター

Saint Bot	4
Cobalt Strike	2
RedLine Stealer	2
Prophet Spider	1
Mirai	1

関心

タイプ

Not Defined	78
Content Management System	20
Programming Language Software	12
Router Operating System	6
Photo Gallery Software	4

ベンダー

Not Defined	62
Microsoft	6
Adobe	4
Cisco	4
Francisco Burzi	2

製品

LibreNMS	4
Microsoft Windows	4
Adobe ColdFusion	4
MeGaCheatZ	2
WordPress	2

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	HP SAN/iQ hydra.exe 特権昇格	4.3	3.9	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.00283	0.00	CVE-2012-4362
2	Hydra HTTP Header read.c process_header_end サービス拒否	6.4	6.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00117	0.02	CVE-2019-17502
3	IW Guestbook badwords_edit.asp SQLインジェクション	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.00
4	Hydra 弱い認証	5.7	5.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00099	0.00	CVE-2020-5300
5	PHPGurukul Hospital Management System dashboard.php 特権昇格	5.5	5.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00667	0.04	CVE-2020-35745
6	OmniSecure AddUrlShield index.php SQLインジェクション	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.06
7	ORY Hydra error Reflected クロスサイトスクリプティング	5.2	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00097	0.00	CVE-2019-8400
8	phpLinkat showcat.php SQLインジェクション	7.3	7.1	$0-$5k	$0-$5k	High	Unavailable	0.00102	0.00	CVE-2008-3406
9	SourceCodester Customer Relationship Management login.php SQLインジェクション	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00645	0.00	CVE-2021-43130
10	moziloCMS download.php ディレクトリトラバーサル	5.3	4.8	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.01578	0.00	CVE-2008-3589
11	Sam Crew MyBlog games.php 特権昇格	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00609	0.00	CVE-2007-1990
12	HP SAN/iQ Login hydra.exe メモリ破損	10.0	9.5	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.48643	0.00	CVE-2011-4157
13	HP LeftHand Virtual SAN Appliance hydra メモリ破損	10.0	9.5	$25k-$100k	$0-$5k	High	Official Fix	0.78733	0.00	CVE-2013-2343
14	spip Login spip_login.php3 特権昇格	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Unavailable	0.05054	0.04	CVE-2006-1702
15	Linksys WVC11B main.cgi クロスサイトスクリプティング	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01569	0.00	CVE-2004-2508
16	Jelsoft impex ImpExData.php 特権昇格	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04317	0.04	CVE-2006-1382
17	PHP php URL error_log 特権昇格	6.5	5.9	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.00069	0.03	CVE-2006-3011
18	Cisco Linksys EA2700 URL 情報の漏洩	4.3	4.1	$5k-$25k	$0-$5k	Proof-of-Concept	Unavailable	0.00000	0.00
19	MidiCart PHP Shopping Cart item_show.php SQLインジェクション	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.00
20	PHP URL Validation filter_var 特権昇格	5.3	5.1	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00560	0.04	CVE-2020-7071

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	Identified	タイプ	信頼度
1	31.42.185.63	fvr.xyz	Saint Bot	2024年02月12日	verified	高
2	XX.XXX.XXX.XX		Xxxxx Xxx	2024年02月12日	verified	高
3	XXX.XXX.XXX.XXX		Xxxxx Xxx	2024年02月12日	verified	高
4	XXX.XX.XXX.XXX	xxxxxxx.xxx.xx	Xxxxx Xxx	2024年02月12日	verified	高
5	XXX.XXX.XXX.XXX		Xxxxx Xxx	2024年02月12日	verified	高

TTP - Tactics, Techniques, Procedures (11)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-21, CWE-22	Path Traversal	predictive	高
2	T1040	CAPEC-102	CWE-294	Authentication Bypass by Capture-replay	predictive	高
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
4	TXXXX	CAPEC-242	CWE-XX	Xxxxxxxx Xxxxxxxxx	predictive	高
5	TXXXX.XXX	CAPEC-209	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	高
6	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
7	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
8	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
9	TXXXX	CAPEC-50	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
10	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
11	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (155)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/+CSCOE+/logon.html	predictive	高
2	File	/admin/login.php	predictive	高
3	File	/adminPage/main/upload	predictive	高
4	File	/cwc/login	predictive	中
5	File	/includes/rrdtool.inc.php	predictive	高
6	File	/intern/controller.php	predictive	高
7	File	/iwguestbook/admin/badwords_edit.asp	predictive	高
8	File	/iwguestbook/admin/messages_edit.asp	predictive	高
9	File	/usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php	predictive	高
10	File	/www/ping_response.cgi	predictive	高
11	File	admin.php	predictive	中
12	File	admin/dashboard.php	predictive	高
13	File	admin/gallery.php	predictive	高
14	File	admin/manage-departments.php	predictive	高
15	File	admin/sellerupd.php	predictive	高
16	File	admin/vqmods.app/vqmods.inc.php	predictive	高
17	File	administrator/logviewer/searchlog.cfm	predictive	高
18	File	backend/utilities/terminal.js	predictive	高
19	File	bb_usage_stats.php	predictive	高
20	File	board.php	predictive	中
21	File	xxxxx.xxx	predictive	中
22	File	xxx.xxx	predictive	低
23	File	xxxxxxxx.xxx	predictive	中
24	File	xxx-xxxx.xxx	predictive	中
25	File	xxx-xxx/xxxxxxxxxxxx.xxx	predictive	高
26	File	xxxx_xxxxxxxx/xx.xxx	predictive	高
27	File	xxxxxx.xxx.xxx	predictive	高
28	File	xxxxxxxx/xxxxx.xxx	predictive	高
29	File	xxxxxxxxx.xxx.xxx	predictive	高
30	File	xxxxxx.xxx	predictive	中
31	File	xxxxxxx.xxx	predictive	中
32	File	xxxxxxx.xxx	predictive	中
33	File	xxxxxxxx.xxx	predictive	中
34	File	xxxxxxx/xxx/xxxxxxxx/xxxxxxxxx/xxxxxxxx/xxx.x	predictive	高
35	File	xxxxx.xxx	predictive	中
36	File	xxx/xxxxxxxx/xxxx_xxxxx_xxxxxxx.x	predictive	高
37	File	xxxxxxx.xxx	predictive	中
38	File	xxxxx.xxx	predictive	中
39	File	xxxxxxx.xxx	predictive	中
40	File	xxxx_xxxxxxx.xxx.xxx	predictive	高
41	File	xxxx/xxxxx/xxxxxxx.xxx.xxx	predictive	高
42	File	xxxxx.xxx	predictive	中
43	File	xxxxxxxxx.xxx	predictive	高
44	File	xxx.xxx	predictive	低
45	File	xxxxxxxx/xxxxx-xxxx-xxxxxxx.xxx	predictive	高
46	File	xxxxxxxx/xxxxxxxx.xxx.xxx	predictive	高
47	File	xxxxx.xxx	predictive	中
48	File	xxxxx.xxx/xxxxxxxxxxxxx/xxx	predictive	高
49	File	xxxxxx.xxx	predictive	中
50	File	xxxx.xxxx	predictive	中
51	File	xxxxxxxxxx.xxx	predictive	高
52	File	xxxx_xxxxxxx.xxxx	predictive	高
53	File	xxxx_xxxx.xxx	predictive	高
54	File	xxxx.xxx	predictive	中
55	File	xxxxx.xxx	predictive	中
56	File	xxxxx.xxx	predictive	中
57	File	xxxxx_xx.xxxx	predictive	高
58	File	xxxx.xxx	predictive	中
59	File	xxxx.xxx	predictive	中
60	File	xxxxxx.xxx	predictive	中
61	File	xxxxxxx/xxxxxxxx/xxxxx.xxx	predictive	高
62	File	xxxxxx/xxxxxxxxx/xxxxx	predictive	高
63	File	xxx_xxxx.xxx.xxx	predictive	高
64	File	xxxxx.xxx	predictive	中
65	File	xxxx/xxxxx.xxx	predictive	高
66	File	xxxxxxx.xxx	predictive	中
67	File	xxxxxxxxxx.xxx.xxx	predictive	高
68	File	xxxx/xxxxxxxxx.xxx	predictive	高
69	File	xxxx.x	predictive	低
70	File	xxxxxxxxxxxx-xxxx.xxxx	predictive	高
71	File	xxxxxxxxxxxx_xxxxxxxx.xxx.xxx	predictive	高
72	File	xxxxxxxx.xxx	predictive	中
73	File	xxxx.xxx	predictive	中
74	File	xxxxxxxx.xxx	predictive	中
75	File	xxxx-xxx.xxx	predictive	中
76	File	xxxxxxx.xxx	predictive	中
77	File	xxxxxxxxxxx.xxx	predictive	高
78	File	xxxxxxxxx/xxxxxxxx.xxx	predictive	高
79	File	xxxx_xxxxx.xxxx	predictive	高
80	File	xxxx.xxx	predictive	中
81	File	xxxxxxxxx/xxxxxxxxxxxxxxxxxx.xxx	predictive	高
82	File	xxxxxx.xxx	predictive	中
83	File	xxxxxxxx.xxx	predictive	中
84	File	xxxxxxxxx.xxx	predictive	高
85	File	xxxxxxx.xxx	predictive	中
86	File	xx-xxxxx/xxxxx.xxx?xxxx=xxxxxxxxxxxx	predictive	高
87	File	xx-xxxxx/xxxxx-xxxxxx.xxx	predictive	高
88	File	xx-xxxxx.xxx	predictive	中
89	File	xxxxxxxxxxxx.xxx	predictive	高
90	Library	xxxxxxxx_xxxxxxxxx.xxx.xxx	predictive	高
91	Argument	$_xxxxx	predictive	低
92	Argument	$_xxxx['xxxxxxxxx']	predictive	高
93	Argument	$_xxxxxx['xxxxxx_xxxx']	predictive	高
94	Argument	xxxxxxx	predictive	低
95	Argument	xxxxxxx	predictive	低
96	Argument	xxxx_xxx	predictive	中
97	Argument	xx_xxxx_xxxx	predictive	中
98	Argument	xxxxxx	predictive	低
99	Argument	xxx	predictive	低
100	Argument	xxxxxxxxxx	predictive	中
101	Argument	xxxxx	predictive	低
102	Argument	xxxxx	predictive	低
103	Argument	xxx_xx	predictive	低
104	Argument	xxx[xxxxxx][xxxxxxxxx]	predictive	高
105	Argument	xxx	predictive	低
106	Argument	xxxxxxxxxxxxxxx	predictive	高
107	Argument	xxxxxxxxx	predictive	中
108	Argument	xxxx_xx	predictive	低
109	Argument	xxxxxxx	predictive	低
110	Argument	xxxxxxxxxxx	predictive	中
111	Argument	xxxxxxx-xxxxxx	predictive	高
112	Argument	xxxx_xxx	predictive	中
113	Argument	xxxxxx_xx	predictive	中
114	Argument	xxxxx_xxxx	predictive	中
115	Argument	xxxxx	predictive	低
116	Argument	xxxx	predictive	低
117	Argument	xxxxxx	predictive	低
118	Argument	xxxxxx	predictive	低
119	Argument	xxxxxx$xxxxx	predictive	中
120	Argument	xxxxxxx[xx_xxx_xxxx]	predictive	高
121	Argument	xxxx	predictive	低
122	Argument	xx	predictive	低
123	Argument	xxxxx	predictive	低
124	Argument	xx_xxxx	predictive	低
125	Argument	xxxxxx	predictive	低
126	Argument	xxxxxx	predictive	低
127	Argument	xxxx	predictive	低
128	Argument	xxxxxxxxx	predictive	中
129	Argument	xxxxxx	predictive	低
130	Argument	xxx_xxxxxxx_xxx	predictive	高
131	Argument	xxxxxxxxx	predictive	中
132	Argument	xxxx[xxxxx]	predictive	中
133	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	高
134	Argument	xxxx/xxxxx	predictive	中
135	Argument	xxxx_xxxx	predictive	中
136	Argument	xxxxxxxx	predictive	中
137	Argument	xxxxx_xxxx_xxxx	predictive	高
138	Argument	xxxx_xx	predictive	低
139	Argument	xx_xxxx	predictive	低
140	Argument	xxxxxx	predictive	低
141	Argument	xxxxxx	predictive	低
142	Argument	xxxxx	predictive	低
143	Argument	xxxx	predictive	低
144	Argument	xxxxxxxx	predictive	中
145	Argument	xxxxx	predictive	低
146	Argument	xxxxxx	predictive	低
147	Argument	xxxxxxxx	predictive	中
148	Argument	xxxxxxxxxx	predictive	中
149	Argument	xxxxx	predictive	低
150	Argument	xxxxxx	predictive	低
151	Argument	xxxxxxxx	predictive	中
152	Argument	\xxxxxx\	predictive	中
153	Argument	_xxxx[_xxx_xxxx_xxxx	predictive	高
154	Input Value	../	predictive	低
155	Input Value	x+xxxxx+xxxxxx+x,xxxxxxx,xxxxxxxxxxx+xxxx+xxxxx#	predictive	高

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Do you need the next level of professionalism?

Upgrade your account now!