Syrian Electronic Army 解析

IOB - Indicator of Behavior (313)

タイムライン

言語

en290
es8
ar6
pl4
fr2

国・地域

us174
cn72
ir34
es12
kr4

アクター

アクティビティ

関心

タイムライン

タイプ

ベンダー

製品

Microsoft Office10
WordPress8
Microsoft Windows8
Linux Kernel8
Apache HTTP Server6

脆弱性

#脆弱性BaseTemp0day本日修復EPSSCTICVE
1Microsoft Windows SMB 特権昇格7.77.1$25k-$100k$0-$5kHighOfficial Fix0.974270.10CVE-2017-0144
2Cisco IOS NTP Interface Queue 特権昇格7.57.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.005630.00CVE-2016-1478
3Microsoft Word/Office/Outlook RTF Document メモリ破損10.09.6$25k-$100k$0-$5kHighOfficial Fix0.614450.00CVE-2014-1761
4Peplink Balance Cookie admin.cgi SQLインジェクション8.57.7$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.014570.02CVE-2017-8835
5vsftpd deny_file 未知の脆弱性3.73.6$0-$5k$0-$5kNot DefinedOfficial Fix0.003120.04CVE-2015-1419
6Citrix Netscaler SD-WAN Session ID Cookie 特権昇格9.89.4$5k-$25k$0-$5kHighOfficial Fix0.961680.00CVE-2017-6316
7Saxum Picker SQLインジェクション8.57.7$0-$5k$0-$5kProof-of-ConceptNot Defined0.002820.03CVE-2018-7178
8Microsoft IIS クロスサイトスクリプティング5.24.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.005480.10CVE-2017-0055
9TVT Dvr Firmware ディレクトリトラバーサル7.57.1$0-$5k$0-$5kProof-of-ConceptNot Defined0.153910.05CVE-2013-6023
10D-Link IP Cameras rtpd.cgi 構成ミス9.88.8$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.915590.00CVE-2013-1599
11Microsoft IIS IP/Domain Restriction 特権昇格6.55.7$25k-$100k$0-$5kUnprovenOfficial Fix0.008170.29CVE-2014-4078
12Linksys WVC11B main.cgi クロスサイトスクリプティング4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.015690.04CVE-2004-2508
13Yiiframework 特権昇格7.37.3$0-$5k$0-$5kNot DefinedNot Defined0.005540.02CVE-2014-4672
14RealNetworks RealServer Port 7070 Service サービス拒否7.57.3$0-$5k$0-$5kNot DefinedWorkaround0.021160.05CVE-2000-0272
15phpMyAdmin grab_globals.lib.php ディレクトリトラバーサル4.84.4$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.023340.10CVE-2005-3299
16Huawei SXXXX XML Parser 特権昇格3.63.6$0-$5k$0-$5kNot DefinedNot Defined0.000560.03CVE-2017-15346
17WordPress Installation functions.php is_blog_installed 特権昇格8.07.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.024210.04CVE-2020-28037
18Plupload plupload.flash.swf クロスサイトスクリプティング6.15.9$0-$5k$0-$5kNot DefinedOfficial Fix0.010190.03CVE-2016-4566
19Telerik Progress UI for ASP.NET AJAX Telerik.Web.UI 弱い暗号化8.58.2$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.081370.05CVE-2017-11317
20WordPress Password Reset wp-login.php mail 特権昇格6.15.8$5k-$25k$0-$5kProof-of-ConceptNot Defined0.028270.15CVE-2017-8295

IOC - Indicator of Compromise (39)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIPアドレスHostnameアクターキャンペーンIdentifiedタイプ信頼度
131.8.47.7h31-8-47-7.dyn.bashtel.ruSyrian Electronic Army2021年01月01日verified
231.8.48.7h31-8-48-7.dyn.bashtel.ruSyrian Electronic Army2021年01月01日verified
331.9.48.1Syrian Electronic Army2021年01月01日verified
431.9.48.7Syrian Electronic Army2021年01月01日verified
531.9.48.11Syrian Electronic Army2021年01月01日verified
631.9.48.84Syrian Electronic Army2021年01月01日verified
731.9.48.119Syrian Electronic Army2021年01月01日verified
831.9.48.141Syrian Electronic Army2021年01月01日verified
9XX.X.XX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
10XX.X.XX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
11XX.X.XX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
12XX.XX.XX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
13XX.XX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
14XX.XX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
15XX.XXX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
16XX.XXX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
17XX.XXX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
18XX.XXX.XXX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
19XX.X.XX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
20XX.XX.XX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
21XX.X.XX.XXxxxxx.xx.x.xx.xx.xxxxxxx.xxXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
22XX.XXX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
23XX.XXX.XXX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
24XX.XXX.XXX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
25XX.XXX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
26XX.XXX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
27XX.XXX.XXX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
28XXX.XX.X.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
29XXX.XX.XX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
30XXX.XX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
31XXX.XX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
32XXX.XX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
33XXX.XX.XXX.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
34XXX.XX.XXX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
35XXX.XX.XXX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
36XXX.XXX.XXX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
37XXX.XXX.XXX.XXXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
38XXX.XX.XXX.XXxxxx.xxx-xxxxx.xxxxxxxx.xxxx.xxXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified
39XXX.X.X.XXXxxxxx Xxxxxxxxxx Xxxx2021年01月01日verified

TTP - Tactics, Techniques, Procedures (17)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (107)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDクラスIndicatorタイプ信頼度
1File/.ssh/authorized_keys2predictive
2File/anony/mjpg.cgipredictive
3File/forms/doLoginpredictive
4File/html/device-idpredictive
5File/uncpath/predictive
6Filea2dp_aac_decoder.ccpredictive
7Fileactbar3.ocxpredictive
8Fileadclick.phppredictive
9Fileadmin.phppredictive
10Fileadmin/users/addpredictive
11Fileadministrator/components/com_media/helpers/media.phppredictive
12Fileajax-actions.phppredictive
13Filexxxxxxxxxxx/xxxxxxxxxx.xxpredictive
14Filexxxxx.xxxpredictive
15Filexxxxxxxx.xxxpredictive
16Filexxxxxxxxx.xxxpredictive
17Filexxxxxx.xxxpredictive
18Filexxx-xxx/xxxxx/xxxxx.xxxpredictive
19Filexxxxx.xxxxxxxxx.xxxpredictive
20Filexxxxxxxxxxxx.xxxxpredictive
21Filexxxx/xxxxxxxxxxxxxxx.xxxpredictive
22Filexxxxxxx/xxxx/xxxx/xxxx.xpredictive
23Filexxxxxxx.xxxpredictive
24Filexxxx/xxxxxxxxxx/xxxxxx-xxxxxxx.xpredictive
25Filexxx/xxxx/xxxxxx/xxxxxx_xxxxxxx.xpredictive
26Filexxx/xxxxxxxx/xxx_xxxxxxxxxxxx.xxpredictive
27Filexxxx_xxxxxxx.xxx.xxxpredictive
28Filexx/xxx/xxx-xxxx.xpredictive
29Filexxxxx.xxx.xxxpredictive
30Filexxxxx.xxxpredictive
31Filexxxxxxxxx.xxxpredictive
32Filexxxxxx.xpredictive
33Filexxxxxxxxxx/xxx/xxxxxx_xxxx.xxxpredictive
34Filexxxx.xxxpredictive
35Filexxx_xxx_xxxxxx.xpredictive
36Filexxx_xxxxx_xxxx.xpredictive
37Filexxxxx.xxxpredictive
38Filexxxxx.xxxpredictive
39Filexxx/xxxxxx/xx_xxxxxx.xpredictive
40Filexxx.xxxpredictive
41Filexxxxxxxx.xxxxx.xxxpredictive
42Filexxxxx_xxx.xxxpredictive
43Filexxxxxxx.xxxpredictive
44Filexxxxxxx_xxxx.xxxpredictive
45Filexxxxxxx.xpredictive
46Filexxxxx/xxxxx.xxxpredictive
47Filexxxxxxxxxxxxxxxx.xxpredictive
48Filexxxxxx.xxxpredictive
49Filexxxx.xxxpredictive
50Filexxx/xxxxxxxx.xpredictive
51Filexxxxxxxxx.xxxpredictive
52Filexxxxxxx.xxxpredictive
53Filexxx/xxx/xxx-xxx/xxxx.xxxpredictive
54Filexxx.xxxpredictive
55Filexx-xxxxx/xxxxx.xxxpredictive
56Filexx-xxxxx/xxxx.xxxpredictive
57Filexx-xxxxxxxx/xxxxxxxxx.xxxpredictive
58Filexx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxxpredictive
59Filexx-xxxxx.xxxpredictive
60Library/xxx/xxxxx/xxxxxxxxx.xxpredictive
61Libraryxxxxxx.xxxpredictive
62Libraryxxxxx.xxxpredictive
63Libraryxxxxx.xxxpredictive
64Libraryxxxxxx.xxxpredictive
65Libraryxxxxxxxxxx/xxxxxx_xxxxxxxxx.xpredictive
66Libraryxxxxxxxx.xxxpredictive
67Libraryxxxxxxxxxxxxxxxx.xxxpredictive
68Libraryxxxxxxxxxxxxxx.xxxxxxx.xxxxxxxxxxxxxxx.xxxpredictive
69Libraryxxxxxx.xxxpredictive
70Libraryxxxxxx.xxxpredictive
71Argument$xxxxpredictive
72Argumentxxxxxpredictive
73Argumentxxxxxxxxxxpredictive
74Argumentxxxxxxxxxx_xxxxpredictive
75Argumentxxx_xxpredictive
76Argumentxxxxxxxpredictive
77Argumentxxxxxxxxxxpredictive
78Argumentxxxx/xxxx/xxxxxxxxxpredictive
79Argumentxxxxxpredictive
80Argumentxxxxxpredictive
81Argumentxxxxx xxxxpredictive
82Argumentxxxx_xxxxxx[xxxxx]predictive
83Argumentxxxxpredictive
84Argumentxxxxxxxpredictive
85Argumentxxxxpredictive
86Argumentxxpredictive
87Argumentxxxxxxx_xxxxpredictive
88Argumentx_xxxxxx_xxxxx_xxxxpredictive
89Argumentxxxx_xxxxpredictive
90Argumentxxxxxxxx_xxpredictive
91Argumentxxxxxxxxpredictive
92Argumentxxxxxxpredictive
93Argumentxxxxxxxpredictive
94Argumentxxxpredictive
95Argumentxxxxpredictive
96Argumentxxxxpredictive
97Argumentxxxxxpredictive
98Argumentxx_xxxx_xxxpredictive
99Argumentxxxxxxxx/xxxxxxxxpredictive
100Argumentxxxxxxxxxxxxpredictive
101Pattern|xx|xx|xx|predictive
102Network Portxxxxpredictive
103Network Portxxx/xxxx (xxxxx)predictive
104Network Portxxx/xxxxpredictive
105Network Portxxx/xxx (xxx)predictive
106Network Portxxx/xxx (xxxx)predictive
107Network Portxxx xxxxxx xxxxpredictive

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

Might our Artificial Intelligence support you?

Check our Alexa App!