Allakore Analysis

IOB - Indicator of Behavior (71)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en52
de20

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

us28
de16
ca2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Moodle4
Play Framework4
Linksys WAG54GS4
Vlad Alexa Mancini PHPFootball4
Adobe Flash Player2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25k$0-$5kHighWorkaround0.040.04187CVE-2007-1192
2Joomla CMS com_easyblog sql injection6.36.1$5k-$25k$5k-$25kNot DefinedNot Defined1.010.00000
3DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.530.04187CVE-2010-0966
4DolphinPHP User Management Page cross site scripting3.53.2$0-$5k$0-$5kProof-of-ConceptNot Defined0.030.00885CVE-2022-1086
5LogicBoard CMS away.php redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable0.790.00000
6vu Mass Mailer Login Page redir.asp sql injection7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.070.01139CVE-2007-6138
7Dataiku DSS Project access control6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.010.00885CVE-2021-27225
8payfort-php-SDK success.php cross site scripting5.25.2$0-$5k$0-$5kNot DefinedNot Defined0.040.00954CVE-2018-19188
9MidiCart PHP Shopping Cart item_show.php sql injection6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.040.00000
10Cisco Linksys EA2700 URL information disclosure4.34.1$5k-$25k$0-$5kProof-of-ConceptUnavailable0.060.00000
11Mozilla Firefox/Thunderbird SetOffsets resource management7.57.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.08228CVE-2013-1677
12IBM InfoSphere Master Data Management cross site scripting3.53.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.01055CVE-2015-1968
13IBM Rational Collaborative Lifecycle Management Jazz Foundation cross site scripting3.53.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.000.01055CVE-2015-0130
14McAfee ePolicy Orchestrator cross site scripting4.34.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.050.01136CVE-2015-4559
15Moodle configonlylib.php min_get_slash_argument path traversal6.36.0$5k-$25k$0-$5kNot DefinedOfficial Fix0.010.01132CVE-2015-1493
16WordPress Shortcodes/Post Content server-side request forgery6.35.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.020.36555CVE-2013-0235
17Moodle Contacts/Messages information disclosure5.34.6$5k-$25k$0-$5kUnprovenOfficial Fix0.020.01061CVE-2015-2266
18Moodle mdeploy.php access control6.35.5$5k-$25k$0-$5kUnprovenOfficial Fix0.030.01061CVE-2015-2267
19Moodle Regular Expression resource management5.34.6$5k-$25k$0-$5kUnprovenOfficial Fix0.040.01061CVE-2015-2268
20Adobe Flash Player use after free10.08.7$25k-$100k$0-$5kUnprovenOfficial Fix0.040.04219CVE-2015-0342

IOC - Indicator of Compromise (7)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (10)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (32)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/forum/away.phppredictiveHigh
2File/wordpress/wp-admin/admin.phppredictiveHigh
3Fileadmin/index.phppredictiveHigh
4Filedata/gbconfiguration.datpredictiveHigh
5Filexxxxxx.xxxpredictiveMedium
6Filexxx/xxxxxx.xxxpredictiveHigh
7Filexxxx_xxxx.xxxpredictiveHigh
8Filexxx/xxxx/xxx.x/xxxx_xxxxxx.xpredictiveHigh
9Filexxxxx.xxxpredictiveMedium
10Filexxxxxxx.xxxpredictiveMedium
11Filexxxxxxxxx/xxxx-xxxxpredictiveHigh
12Filexxxx.xxxpredictiveMedium
13Filexxxxx/xxxxxxx/predictiveHigh
14Filexxxxxx.xxxpredictiveMedium
15Filexxxxx.xxxpredictiveMedium
16Filexxxxxxxxxxxxxx.xxxpredictiveHigh
17Filexxxxx.xxxpredictiveMedium
18Filexxxxxxx.xxxpredictiveMedium
19Libraryxxx/xxxxxxxxxxxxx.xxxpredictiveHigh
20ArgumentxxxxxxxxpredictiveMedium
21Argumentxxxx_xxpredictiveLow
22ArgumentxxxxxxxpredictiveLow
23ArgumentxxxxpredictiveLow
24Argumentxxxx_xxpredictiveLow
25ArgumentxxpredictiveLow
26ArgumentxxxxxxxxxxpredictiveMedium
27ArgumentxxxxxxpredictiveLow
28ArgumentxxxxxxxxpredictiveMedium
29Argumentxxxxxxx_xxpredictiveMedium
30ArgumentxxxxxxxpredictiveLow
31ArgumentxxxxpredictiveLow
32ArgumentxxxxxpredictiveLow

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!