Wild Neutron 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

言語

en	866
zh	44
de	20
sv	14
ar	14

国・地域

nl	996
om	4

アクター

RedLine Stealer	7
Domestic Kitten	3
Mylobot	3
Dorkbot	3
Charming Kitten	2

関心

タイプ

Not Defined	216
Operating System	142
Content Management System	42
Web Server	42
Firewall Software	36

ベンダー

Not Defined	234
Microsoft	146
Apache	44
Linux	36
Cisco	30

製品

Microsoft Windows	94
Linux Kernel	36
Google Android	24
Apache HTTP Server	24
WordPress	20

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	nginx 特権昇格	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	3.53	CVE-2020-12440
2	Huawei ACXXXX/SXXXX SSH Packet 特権昇格	7.5	7.3	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00246	0.00	CVE-2014-8572
3	Microsoft Windows WPAD 特権昇格	8.0	7.9	$25k-$100k	$0-$5k	High	Official Fix	0.90962	0.03	CVE-2016-3213
4	Microsoft Windows Graphics Remote Code Execution	7.0	6.1	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.04080	0.00	CVE-2021-34530
5	Microsoft Windows Event Tracing Privilege Escalation	7.3	6.3	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.00043	0.03	CVE-2021-34487
6	Microsoft IIS クロスサイトスクリプティング	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00548	0.00	CVE-2017-0055
7	Cisco Secure Email and Web Manager Web-based Management Interface 弱い認証	9.8	9.6	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00363	0.04	CVE-2022-20798
8	nginx Log File 特権昇格	7.8	7.4	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00092	0.05	CVE-2016-1247
9	Apache HTTP Server mod_rewrite Redirect	6.7	6.7	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00258	0.29	CVE-2020-1927
10	Microsoft .NET Core/Visual Studio サービス拒否	6.4	5.5	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00192	0.09	CVE-2021-26423
11	Microsoft Windows TCP/IP Stack Privilege Escalation	9.9	8.6	$100k 以上	$5k-$25k	Unproven	Official Fix	0.02183	0.04	CVE-2021-26424
12	Microsoft Windows Event Tracing Privilege Escalation	8.3	7.3	$100k 以上	$5k-$25k	Unproven	Official Fix	0.00068	0.04	CVE-2021-26425
13	Microsoft Windows Bluetooth Driver Privilege Escalation	8.3	7.3	$100k 以上	$5k-$25k	Unproven	Official Fix	0.00043	0.00	CVE-2021-34537
14	Microsoft Dynamics 365 Privilege Escalation	8.5	7.4	$25k-$100k	$0-$5k	Unproven	Official Fix	0.00736	0.00	CVE-2021-34524
15	Microsoft Windows Storage Spaces Controller Local Privilege Escalation	7.8	6.8	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.00043	0.04	CVE-2021-34536
16	Microsoft Windows Graphics Remote Code Execution	7.0	6.1	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.04080	0.03	CVE-2021-34533
17	Microsoft Windows Services for NFS ONCRPC XDR Driver 情報の漏洩	6.4	5.5	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.01326	0.03	CVE-2021-36926
18	Microsoft ASP.NET Core/Visual Studio 情報の漏洩	4.9	4.3	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00043	0.00	CVE-2021-34532
19	Microsoft Windows Services for NFS ONCRPC XDR Driver 情報の漏洩	6.4	5.5	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.01326	0.00	CVE-2021-36933
20	Microsoft Windows Remote Desktop Client Remote Code Execution	8.8	7.9	$100k 以上	$5k-$25k	Proof-of-Concept	Official Fix	0.05216	0.04	CVE-2021-34535

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	Identified	タイプ	信頼度
1	46.183.217.132	skalli.pereformed.com	Wild Neutron	2020年12月24日	verified	高
2	XX.XXX.XXX.XXX	xx-xxx-xxx-xxx.xxxxxxxxxxx.xxx	Xxxx Xxxxxxx	2020年12月24日	verified	高
3	XX.XX.XXX.XX	xx-xx-xxx-xx.xxxxxx.xxx	Xxxx Xxxxxxx	2020年12月24日	verified	高
4	XXX.XX.XX.XXX	xxx.xxxxxxxxxxxxx.xxx.xx	Xxxx Xxxxxxx	2020年12月24日	verified	高
5	XXX.XX.X.XX	xxxxxxxx.xxxxxxxxxxx.xx	Xxxx Xxxxxxx	2020年12月24日	verified	高

TTP - Tactics, Techniques, Procedures (21)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-21, CWE-22, CWE-23	Path Traversal	predictive	高
2	T1040	CAPEC-102	CWE-294	Authentication Bypass by Capture-replay	predictive	高
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
4	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	高
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	高
6	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
7	TXXXX.XXX	CAPEC-16	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
8	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
9	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
10	TXXXX	CAPEC-	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	高
11	TXXXX	CAPEC-	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
12	TXXXX	CAPEC-184	CWE-XXX	Xxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx	predictive	高
13	TXXXX	CAPEC-108	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	高
14	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
15	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
16	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
17	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
18	TXXXX.XXX	CAPEC-	CWE-XX	Xxxxxxxxxxxxx	predictive	高
19	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
20	TXXXX.XXX	CAPEC-112	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
21	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (234)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	.travis.yml	predictive	中
2	File	/.env	predictive	低
3	File	/admin.php	predictive	中
4	File	/admin/subnets/ripe-query.php	predictive	高
5	File	/apply.cgi	predictive	中
6	File	/core/conditions/AbstractWrapper.java	predictive	高
7	File	/debug/pprof	predictive	中
8	File	/export	predictive	低
9	File	/file?action=download&file	predictive	高
10	File	/hardware	predictive	中
11	File	/librarian/bookdetails.php	predictive	高
12	File	/medical/inventories.php	predictive	高
13	File	/monitoring	predictive	中
14	File	/opt/zimbra/jetty/webapps/zimbra/public	predictive	高
15	File	/plugin/LiveChat/getChat.json.php	predictive	高
16	File	/plugins/servlet/audit/resource	predictive	高
17	File	/plugins/servlet/project-config/PROJECT/roles	predictive	高
18	File	/replication	predictive	中
19	File	/RestAPI	predictive	中
20	File	/tmp/speedtest_urls.xml	predictive	高
21	File	/tmp/zarafa-vacation-*	predictive	高
22	File	/uncpath/	predictive	中
23	File	/upload	predictive	低
24	File	/user/loader.php?api=1	predictive	高
25	File	/var/log/nginx	predictive	高
26	File	/var/run/watchman.pid	predictive	高
27	File	/xxxxxx/xxxxxx.xxxx	predictive	高
28	File	/xx-xxxx/xxxxxx/x.x/xxxxx?xxx	predictive	高
29	File	xxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
30	File	xxxxx-xxxx.xxx?xxxxxx=xxx_xxxxxxx xxxxx[x][xxx]	predictive	高
31	File	xxxxxxx.xxx	predictive	中
32	File	xxxxxxx.xxx	predictive	中
33	File	xxx/xxx/xxxx-xxx	predictive	高
34	File	xxx/xx/xxxxxx	predictive	高
35	File	xxxxx.xxx	predictive	中
36	File	xxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
37	File	xxxx/xxxxxxx/xxx/xxxxxx_xxxx.x	predictive	高
38	File	xxxx-xxxx.x	predictive	中
39	File	xxxx/xxxxxxx.xxx	predictive	高
40	File	x:\xxxxxxx xxxxx\xxxxxx xxxxx\xxx\xxxxxxx.xxx	predictive	高
41	File	x:\xxxxxxx\xxxxxxxx\xxxxxx\xxx	predictive	高
42	File	xxxx.xxx	predictive	中
43	File	xxx-xxx/xx.xxx	predictive	高
44	File	xxx/xxxxxxx.xx	predictive	高
45	File	xxxxx.xxx	predictive	中
46	File	xxxxxx.xxx	predictive	中
47	File	xxx_xxxxxx.xxx	predictive	高
48	File	xxx.xxx	predictive	低
49	File	xxxxxx.xxx	predictive	中
50	File	xxxxxxxx.xx	predictive	中
51	File	xxxxxxxxxx/xxxxxx/xxxxxxxxx.xxxx/xxxx.xxx/	predictive	高
52	File	x_xxxxxx	predictive	中
53	File	xxxxxx.xxx	predictive	中
54	File	xxxxxxx.xxx	predictive	中
55	File	xxxxxxx/xxxxx/xxxxxx.x	predictive	高
56	File	xxxxxxx/xxx/xxxxxxx/xxxx.x	predictive	高
57	File	xxxxxxx/xxxx/xxxx_xxxxxxxxx_xxxxx.x	predictive	高
58	File	xxxx_xxxxx.xxx	predictive	高
59	File	xxx/xxxxxxxx/xxx_xxxxxxxxxxxx.x	predictive	高
60	File	xxxxxxxx.x	predictive	中
61	File	xxxxxxxxx/xxxxx/xxxxxxxxxxxx/xxxxxxxxx.xxx	predictive	高
62	File	xx/xxxxxxxxx.x	predictive	高
63	File	xx/xxxxx.x	predictive	中
64	File	xx/xxxxx/xxxxxxx.x	predictive	高
65	File	xxxxx.xxx	predictive	中
66	File	xxxxxxxxxx.xx	predictive	高
67	File	xxxx/xxxxxxxxxxxxxxxxxxxxxxxx.xx	predictive	高
68	File	xxxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
69	File	xxxxx-xxxxx.x	predictive	高
70	File	xxxxxx_xxxxx_xxxxxxx.x	predictive	高
71	File	xxxxx-xxxxxxxxxx.x	predictive	高
72	File	xxxxxxx/xxxx.xxx	predictive	高
73	File	xxxxx.xxx	predictive	中
74	File	xxxxx.xxx?xx=xxxxxxxx.xxxxxx	predictive	高
75	File	xxxxx:/xxxxxxxx/xxxxxxxxxxxx.xxxx	predictive	高
76	File	xxxxx/xxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxx	predictive	高
77	File	xxxx_xxxx.xxx	predictive	高
78	File	xxxx_xxxxxx.xx	predictive	高
79	File	xxxxxx/xxx/xxxxxxxx.x	predictive	高
80	File	xxxxxx/xxxxx/xxxxx_xxxxxx_xxxxxx.x	predictive	高
81	File	xxxxxxx/xx_xxx.x	predictive	高
82	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxx	predictive	高
83	File	xxxx.xxx	predictive	中
84	File	xxxxx.xxx	predictive	中
85	File	xxxxx.xxx	predictive	中
86	File	xxxxxxxxxx/xxx.x	predictive	高
87	File	xxxx.x	predictive	低
88	File	xxxx.xxx	predictive	中
89	File	xxxxxx_xxxxx_xxxxxxx.x	predictive	高
90	File	xxxxxxxxxxxxxxxx.x	predictive	高
91	File	xxx/xxxxxxxxx/xx_xxxxxx_xxx.x	predictive	高
92	File	xxx/xxxxxxxxx/x_xxxxxx.x	predictive	高
93	File	xxxx.xxx	predictive	中
94	File	xxx_xxxxxxx.x	predictive	高
95	File	xxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
96	File	xxx_xx.x	predictive	中
97	File	xxxxxxxxxxxxxxxxx.xxx	predictive	高
98	File	xxxxxxxxx.xxx.xxx	predictive	高
99	File	xxxxxxx.xxx	predictive	中
100	File	xxxxxxxx.xxxx	predictive	高
101	File	xxxxxxxxxxxx.xxx	predictive	高
102	File	xxxxxxxxxxxxx.xxxx	predictive	高
103	File	xxxxxx.x	predictive	中
104	File	xxxxx.xxx	predictive	中
105	File	xxxxxx/?x=xxxxx/\xxxxx\xxx/xxxxxxxxxxxxxx&xxxxxxxx=xxxx_xxxx_xxxx_xxxxx&xxxx[x]=xxxxxx&xxxx[x][]	predictive	高
106	File	xxxxxxxx.xxx	predictive	中
107	File	xxxxxxx.x	predictive	中
108	File	xxxxxxx.xxx	predictive	中
109	File	xxxxxxx.x	predictive	中
110	File	xxxxxxxxxx_xxxxx.xxxxxx	predictive	高
111	File	xxxx_xxx_xx.x	predictive	高
112	File	xx_xxx.x	predictive	中
113	File	xxx.x	predictive	低
114	File	xxxxxx.x	predictive	中
115	File	xxxxx.xxx	predictive	中
116	File	xxxx-xxxxxx.x	predictive	高
117	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	高
118	File	xxxxxxx.x	predictive	中
119	File	xxx/xxx_xxxxx.x	predictive	高
120	File	xxxxxxx.xxx.xx.xxxxxxxxxxx.xxx	predictive	高
121	File	xx.xxx	predictive	低
122	File	xxxxxx.xxx	predictive	中
123	File	xxxxxxxx.xxx	predictive	中
124	File	xxxxxxx/xxxxxxx/xxxxxx/xxxxxx_xxxx.xxx	predictive	高
125	File	xxxx.xxxxxxxxx.xxx	predictive	高
126	File	xxxx_xxxx.xxx	predictive	高
127	File	xxxxxx.xxx	predictive	中
128	File	xxx.xxx	predictive	低
129	File	xxxxx.xxx	predictive	中
130	File	xxxxxx/xx/xxxx.xxx	predictive	高
131	File	xx-xxxxx/xxxxx-xxxx.xxx	predictive	高
132	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	高
133	File	xx-xxxxxxxx/xxxxxxx-xxxxxxxx.xxx	predictive	高
134	File	xx-xxxxxxxx/xxxx.xxx	predictive	高
135	File	xx-xxxxxxxx/xxxxxxxxx.xxx	predictive	高
136	File	xx/xx/xxxxx	predictive	中
137	File	xx_xxxxxxx.x	predictive	中
138	File	_xxxxxxxx/xxxxxxxx.xxx	predictive	高
139	File	~/xxxx/xxx/xxxxxxx/xxxxxxxxxx/xxxxxx.xxx	predictive	高
140	Library	xxxxx/xxxxxxxxx/xxxx.xxxxxxxxx.xxx	predictive	高
141	Library	xxxxxxxxx.xxx	predictive	高
142	Library	xxxxxxxx.xxx	predictive	中
143	Library	xxxxxxxxxx/xxxxxxxx.x	predictive	高
144	Library	xxxxxxxx.xxx	predictive	中
145	Library	xxxxxxxxx.xxx	predictive	高
146	Library	xxxxxxxx.xxx	predictive	中
147	Library	xxxxxx.xxx.xxx.xxx	predictive	高
148	Library	xxxxxxxx.xxx	predictive	中
149	Library	xxxxxxxx.xxx	predictive	中
150	Argument	-x	predictive	低
151	Argument	xx_xxxxx_xxx_xxxx	predictive	高
152	Argument	xxxxxx_xxxx	predictive	中
153	Argument	xxx	predictive	低
154	Argument	xxxxx	predictive	低
155	Argument	xxx_xx	predictive	低
156	Argument	xxxxxxxxxxxxxxx	predictive	高
157	Argument	xxxx_xx	predictive	低
158	Argument	xxxxxx	predictive	低
159	Argument	xxxxxxx xxxx	predictive	中
160	Argument	xxxxxxxxxx	predictive	中
161	Argument	xxxxxxx	predictive	低
162	Argument	xxxxxxx_xxxx->xxx($xxxxxxxx)	predictive	高
163	Argument	xxxxxx	predictive	低
164	Argument	xxxxxxxxxxx	predictive	中
165	Argument	xxxxxx_xxxx	predictive	中
166	Argument	xxxxxxxxx->xxxxxxxxx	predictive	高
167	Argument	xx	predictive	低
168	Argument	xx	predictive	低
169	Argument	xxxxxxxxxxxxxx	predictive	高
170	Argument	xxxxxxx	predictive	低
171	Argument	xxxxx[xxxxx][xx]	predictive	高
172	Argument	xxxx_xxxxxx_xxxx	predictive	高
173	Argument	xxxx x xxxx	predictive	中
174	Argument	xxxxxxxxx/xxxxxxxxx	predictive	高
175	Argument	xxx	predictive	低
176	Argument	xx_xxxx	predictive	低
177	Argument	xx[xxxx]	predictive	中
178	Argument	xxxx	predictive	低
179	Argument	xxxxxxxxxxxxxxxxxxxx	predictive	高
180	Argument	xx	predictive	低
181	Argument	xxxxxxx/xxxx/xxxxxxxx	predictive	高
182	Argument	xxxxx	predictive	低
183	Argument	xxxxx/xxxxxx	predictive	中
184	Argument	xxxx	predictive	低
185	Argument	xxxx_xxxx	predictive	中
186	Argument	xxxxxxxx	predictive	中
187	Argument	xxxxxxxx	predictive	中
188	Argument	xxxxxxxx	predictive	中
189	Argument	xxxxxxxxx	predictive	中
190	Argument	xxx_xxx	predictive	低
191	Argument	xxxxxx	predictive	低
192	Argument	xxxxxx	predictive	低
193	Argument	xx_xxxxxxx_xxxxxxx	predictive	高
194	Argument	xxxxxxxxxxxxx	predictive	高
195	Argument	xxxxx	predictive	低
196	Argument	xxxxxxx_xxx	predictive	中
197	Argument	xxxx	predictive	低
198	Argument	xxxxxxx	predictive	低
199	Argument	xxxxxx	predictive	低
200	Argument	xxxxxxxx_xxxxx	predictive	高
201	Argument	xxxxxx	predictive	低
202	Argument	xxx	predictive	低
203	Argument	xxxxxxxxxxxx	predictive	中
204	Argument	xxxxxx	predictive	低
205	Argument	xxxxxxxxx	predictive	中
206	Argument	xxx	predictive	低
207	Argument	xxxxxx	predictive	低
208	Argument	xxx	predictive	低
209	Argument	xxxx	predictive	低
210	Argument	xxxxxxxx-xxxxxxxx	predictive	高
211	Argument	xxx	predictive	低
212	Argument	xxxx	predictive	低
213	Argument	xxxxxxxx	predictive	中
214	Argument	xxxxxxx	predictive	低
215	Argument	xxxx->xxxxxxx	predictive	高
216	Argument	x-xxxxxxxxx-xxx	predictive	高
217	Argument	xxx	predictive	低
218	Argument	\xxxxxx\	predictive	中
219	Argument	_xxx_xxxxxxx_xxxxxxx_xxxxxxxxxxxxx_xxx_xxx_xxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx_xxxxxxxxxxxxxxx	predictive	高
220	Argument	_xxx_xxxxxxxxxxx_	predictive	高
221	Input Value	' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxx	predictive	高
222	Input Value	.%xx.../.%xx.../	predictive	高
223	Input Value	xxx xxxxxxxx	predictive	中
224	Input Value	xxxxxxxx	predictive	中
225	Input Value	xxxxxxxxx' xxx 'x'='x	predictive	高
226	Input Value	xxxxx	predictive	低
227	Input Value	xxxxxxx_xxxxx.xxxxxxx_xxxxxxx	predictive	高
228	Input Value	\x	predictive	低
229	Input Value	….//	predictive	低
230	Pattern	\|xx\|	predictive	低
231	Network Port	xxxxx	predictive	低
232	Network Port	xx xxxxxxx xxx.xx.xx.xx	predictive	高
233	Network Port	xxx/xx (xxxxxx)	predictive	高
234	Network Port	xxx xxxxxx xxxx	predictive	高

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!