APT10 Analysisinfo

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (907)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Language

en816
zh28
ru16
es14
fr10

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

US: USA840
CH: Switzerland26
CN: China20
RU: Russia12
AM: Armenia2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

RedLine Stealer4
APT283
AsyncRAT3
United States of America2
Silence2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined190
Content Management System38
Forum Software14
Programming Language Software8
WordPress Plugin8

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

Not Defined138
SourceCodester14
Apple10
Oracle8
Cisco8

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Apple macOS6
TikiWiki4
gnuboard54
Arista EOS4
WordPress4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

These are the vulnerabilities that we have identified as researched, approached, or attacked.

#VulnerabilityBaseTemp0dayTodayExpCouKEVEPSSCTICVE
1LogicBoard CMS away.php redirect6.36.1$0-$5k$0-$5kNot definedUnavailable 0.000000.17
2DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial fix 0.009700.03CVE-2010-0966
3FLDS redir.php sql injection7.37.3$0-$5k$0-$5kHighUnavailablepossible0.002020.09CVE-2008-5928
4Tiki Admin Password tiki-login.php improper authentication8.07.7$0-$5k$0-$5kNot definedOfficial fixexpected0.911380.52CVE-2020-15906
5Bitrix Site Manager redirect.php link following5.34.7$0-$5k$0-$5kUnprovenUnavailable 0.002460.00CVE-2008-2052
6My Link Trader out.php sql injection6.35.7$0-$5k$0-$5kProof-of-ConceptNot defined 0.000000.05
7SPIP spip.php cross site scripting3.53.4$0-$5k$0-$5kNot definedOfficial fix 0.023050.58CVE-2022-28959
8Vunet VU Web Visitor Analyst redir.asp sql injection7.37.1$0-$5k$0-$5kHighWorkaroundpossible0.012320.03CVE-2010-2338
9OpenX adclick.php redirect5.34.7$0-$5k$0-$5kUnprovenUnavailable 0.004560.09CVE-2014-2230
10Serendipity exit.php privileges management6.36.0$0-$5kCalculatingProof-of-ConceptNot defined 0.000000.02
11GetSimpleCMS index.php redirect6.66.6$0-$5k$0-$5kNot definedNot defined 0.136010.05CVE-2019-9915
12PHPWind goto.php redirect6.36.3$0-$5kCalculatingNot definedNot defined 0.004000.09CVE-2015-4134
13vBulletin redirector.php6.66.6$0-$5k$0-$5kNot definedNot defined 0.187770.06CVE-2018-6200
14Openads adclick.php Remote Code Execution7.36.9$0-$5k$0-$5kProof-of-ConceptNot defined 0.006750.06CVE-2007-2046
15Joomla CMS com_easyblog sql injection6.36.1$5k-$25k$5k-$25kNot definedNot defined 0.000000.20
16TikiWiki tiki-register.php input validation7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial fix 0.042770.81CVE-2006-6168
17vu Mass Mailer Login Page redir.asp sql injection7.36.6$0-$5k$0-$5kProof-of-ConceptNot defined 0.004350.03CVE-2007-6138
18Esoftpro Online Guestbook Pro ogp_show.php sql injection7.36.6$0-$5k$0-$5kProof-of-ConceptNot defined 0.003300.03CVE-2009-4935
19WordPress AdServe adclick.php sql injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial fix 0.008050.08CVE-2008-0507
20kurniaramadhan E-Commerce-PHP Create Product Page create_product.php cross site scripting2.42.3$0-$5k$0-$5kProof-of-ConceptNot defined 0.000140.09CVE-2024-13205

Campaigns (4)

These are the campaigns that can be associated with the actor:

IOC - Indicator of Compromise (138)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsIdentifiedTypeConfidence
15.8.95.174sei809753.example.comAPT10LODEINFO11/08/2022verifiedMedium
223.89.193.34APT10Cloud Hopper12/23/2020verifiedLow
323.110.64.147APT10Cloud Hopper12/23/2020verifiedLow
423.224.75.91APT10Cache Panda02/25/2022verifiedLow
523.224.75.93APT10Cache Panda02/25/2022verifiedLow
623.252.105.13723.252.105.137.16clouds.comAPT10Cloud Hopper05/31/2021verifiedVery Low
727.102.66.67APT1006/01/2021verifiedLow
827.102.115.249APT1006/01/2021verifiedLow
927.102.127.75APT1006/01/2021verifiedLow
1027.102.127.80APT1006/01/2021verifiedLow
1127.102.128.157APT1006/01/2021verifiedLow
1231.184.197.21531-184-197-215.static.x5x-noc.ruAPT10Cloud Hopper12/23/2020verifiedLow
1331.184.197.22731-184-197-227.static.x5x-noc.ruAPT10Cloud Hopper12/23/2020verifiedLow
1431.184.198.23APT10Cloud Hopper12/23/2020verifiedLow
1531.184.198.38APT10Cloud Hopper12/23/2020verifiedLow
1637.187.7.74ns3372567.ip-37-187-7.euAPT10Cloud Hopper12/23/2020verifiedLow
1737.235.52.1818.52.235.37.in-addr.arpaAPT10Cloud Hopper12/23/2020verifiedLow
1838.72.112.45APT10Cloud Hopper12/23/2020verifiedLow
1938.72.114.16APT10Cloud Hopper12/23/2020verifiedLow
2038.72.115.9APT10Cloud Hopper12/23/2020verifiedLow
2143.245.196.120APT10Cache Panda02/25/2022verifiedLow
2243.245.196.121APT10Cache Panda02/25/2022verifiedLow
2343.245.196.122APT10Cache Panda02/25/2022verifiedLow
2443.245.196.123APT10Cache Panda02/25/2022verifiedLow
2543.245.196.124APT10Cache Panda02/25/2022verifiedLow
2645.62.112.16145.62.112.161.16clouds.comAPT10Cloud Hopper12/23/2020verifiedVery Low
2745.77.28.12445.77.28.124.vultrusercontent.comAPT10LODEINFO11/08/2022verifiedMedium
2845.138.157.83google.com.tmAPT10A41APT05/31/2021verifiedLow
29XX.XXX.XX.XXXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
30XX.X.XXX.XXXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
31XX.XX.XX.XXXxxx-xx-xx-xx-xxx.xx-xxxxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
32XX.XX.XXX.XXxxx-xx-xx-xxx-xx.xx-xxxxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
33XX.XX.XX.XXxxx-xx-xx-xx-xx.xx-xxxxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
34XX.XX.XX.XXXxxx-xx-xx-xx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
35XX.XX.XX.XXxxx-xx-xx-xx-xx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
36XX.XX.XXX.XXXxxx-xx-xx-xxx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx05/31/2021verifiedVery Low
37XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx05/31/2021verifiedVery Low
38XX.XXX.XXX.XXxxx-xx-xxx-xxx-xx.xx-xxxxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
39XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xx-xxxxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
40XX.XXX.XXX.XXxxx-xx-xxx-xxx-xx.xx-xxxxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
41XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xx-xxxxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
42XX.XXX.XXX.XXxxx-xx-xxx-xxx-xx.xx-xxxxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
43XX.XXX.XXX.XXxxx-xx-xxx-xxx-xx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
44XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
45XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xx-xxxxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
46XX.XXX.XXX.Xxxx-xx-xxx-xxx-x.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
47XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
48XX.XXX.XXX.XXXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
49XX.XX.XXX.XXXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
50XX.XX.XXX.XXXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
51XX.XXX.XXX.XXxxxxxx.xxxxxxxxxxxxx.xxxXxxxxXxxxx Xxxxxx05/31/2021verifiedVery Low
52XX.XXX.XXX.XXXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
53XX.XXX.XXX.XXXxxxxxx.xxxxxxxxx-xx.xxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
54XX.XXX.XXX.XXxxxxxxxxx-xxx.xxxxxxxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
55XX.XXX.XXX.XXxxx.xxxxxxxx.xxxXxxxx06/05/2021verifiedLow
56XX.XXX.XX.XXXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
57XX.XXX.XXX.XXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
58XX.XXX.XXX.XXXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
59XX.XXX.XXX.XXxxxxxx.xx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxXxxxxx05/31/2021verifiedVery Low
60XX.XX.XXX.XXxxxxx.xxxxx.xxx.xxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
61XX.XXX.XXX.XXXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
62XX.XX.XXX.XXxxxx.xxx-xx.xxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
63XX.XXX.XX.XXxxxxxx-xx.xxxxxxxx.xxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
64XX.XXX.XX.XXxxxxxx-xx.xxxxxxxx.xxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
65XX.XX.XXX.XXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
66XXX.XX.XXX.XXXxxxx10/14/2022verifiedMedium
67XXX.XXX.XXX.XXXXxxxx10/14/2022verifiedMedium
68XXX.XXX.XX.XXXxxxxXxxxxxxx11/08/2022verifiedMedium
69XXX.XXX.XX.XXXxxx.xx.xxxxxxxxxx.xxxXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
70XXX.XXX.XX.XXXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
71XXX.XXX.XXX.XXXxxx.xxx.xxx.xxx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxXxxxx Xxxxx02/25/2022verifiedLow
72XXX.XXX.XXX.XXXxxx.xxx.xxx.xxx.xxxxxxxx.xxxXxxxxXxxxx Xxxxxx05/31/2021verifiedVery Low
73XXX.XXX.XXX.XXXxxxxxxxxxxx.xxxXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
74XXX.XXX.XXX.XXXxxxx.xxxxxx.xxXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
75XXX.XXX.XXX.XXXxxx.xxxxxxxxx.xxxXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
76XXX.XXX.XXX.XXXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
77XXX.XXX.XXX.XXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
78XXX.XX.XXX.XXXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
79XXX.XX.XXX.XXXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
80XXX.XXX.XX.XXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
81XXX.XXX.XX.XXXXxxxx10/14/2022verifiedMedium
82XXX.XXX.XXX.XXXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
83XXX.X.XXX.XXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
84XXX.XXX.XXX.XXXxxxx10/14/2022verifiedMedium
85XXX.XX.XX.XXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
86XXX.XXX.XXX.XXXxxx.xxx.xxx.xxx.xxxxxxxx.xxxXxxxxXxxxx Xxxxxx05/31/2021verifiedVery Low
87XXX.XXX.XXX.XXxxx.xxx.xxx.xx.xxxxxxxxxxxxxxxx.xxxXxxxx10/14/2022verifiedMedium
88XXX.XXX.XX.XXXxxx-xxx-xx-xxx.xxxxxx.xxxx.xxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
89XXX.XXX.XXX.XXXxxx.xxx.xxx.xxx.xxxx.xxxxxxxxxxx.xxxXxxxxXxxxx Xxxxxx05/31/2021verifiedVery Low
90XXX.XX.XX.XXXxxxx12/22/2020verifiedLow
91XXX.XXX.XXX.XXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
92XXX.XXX.XX.XXXXxxxx06/05/2021verifiedLow
93XXX.XXX.XX.XXxx.xx.xxx.xxx.xx-xxxx.xxxxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
94XXX.XXX.XX.XXXxxx.xx.xxx.xxx.xx-xxxx.xxxxXxxxxXxxxxx05/31/2021verifiedLow
95XXX.XX.XXX.XXXXxxxx06/05/2021verifiedLow
96XXX.XXX.XXX.XXxx.xxx.xxx.xxx.xx-xxxx.xxxxXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
97XXX.XXX.XXX.XXXxxxxxxxxx.xxxXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
98XXX.XXX.XXX.XXXxxx.xxx.xxx.xxx.xx-xxxx.xxxxXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
99XXX.XXX.XXX.XXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
100XXX.XXX.XXX.XXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
101XXX.XXX.XXX.XXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
102XXX.XXX.XXX.XXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
103XXX.XXX.XXX.XXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
104XXX.XXX.XXX.XXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
105XXX.XXX.XXX.XXXxx.xxxx.xxxxxxx.xx.xxxxxxx.xxxXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
106XXX.XX.XXX.XXXxxxxxxx.xxxxx.xxxXxxxx06/05/2021verifiedLow
107XXX.XXX.XX.XXxxx.xxx.xx.xx.xxxxxxxxxxxxxxxx.xxxXxxxx10/14/2022verifiedMedium
108XXX.XXX.X.XXXxxxx03/13/2023verifiedMedium
109XXX.XXX.XXX.XXXxxx.xx.xxxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
110XXX.XXX.XX.Xxxx-xxx-xx-x.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxXxxxxxxx11/08/2022verifiedMedium
111XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxXxxxxxxx11/08/2022verifiedMedium
112XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxXxxxxxxx11/08/2022verifiedMedium
113XXX.XXX.XXX.XXXxxxxxx-xxx.xxxxxxx.xxxxxx.xxxXxxxx10/14/2022verifiedMedium
114XXX.XXX.XXX.XXxxx-xxx-xxx-xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxx10/14/2022verifiedMedium
115XXX.XXX.XXX.XXXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
116XXX.XXX.XX.XXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
117XXX.XX.XXX.XXXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
118XXX.XX.X.XXXxx-x-xxx.xxxxxxxx.xxxxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
119XXX.XXX.XX.XXxxxxxxx.xx.xxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
120XXX.XXX.XX.XXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
121XXX.XXX.XX.XXxxx-xxxx.xxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
122XXX.XXX.XX.XXxxxxx.xxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedVery Low
123XXX.XXX.XX.XXxxxxx.xxxxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
124XXX.XXX.XX.XXXxx.xxxxxx.xxxxxxxx-xxxx.xxxxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
125XXX.XXX.XX.XXXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
126XXX.XXX.XX.XXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
127XXX.XXX.XX.XXxxxxx.xxxxxxxxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
128XXX.XXX.XX.Xxxxx.xxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
129XXX.XXX.XXX.XXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
130XXX.XXX.XXX.XXXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
131XXX.XXX.XXX.XXXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
132XXX.XXX.XXX.XXxx.xxx.xxx.xxx.xx-xxxx.xxxxXxxxxXxxxxx05/31/2021verifiedLow
133XXX.XXX.XXX.XXxx.xxx-xxx-xxx.xxxx.xxxxxxxxxxx.xxxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow
134XXX.XXX.XXX.XXXxxx.xxx.xxx.xxx.xxxxxxxxxxxxxxxx.xxxXxxxxXxxxxxxx11/08/2022verifiedMedium
135XXX.XXX.XX.XXxxx.xxx.xx.xx-xx-xxxXxxxxXxxxx Xxxxxx06/01/2021verifiedLow
136XXX.XXX.XX.XXxxx.xxx.xx.xx-xx-xxxXxxxxXxxxx Xxxxxx06/01/2021verifiedLow
137XXX.XXX.XX.XXXXxxxxXxxxx Xxxxxx05/31/2021verifiedLow
138XXX.XXX.XX.XXXxxx.xx.xxx.xxx.xx-xxxx.xxxxXxxxxXxxxx Xxxxxx12/23/2020verifiedLow

TTP - Tactics, Techniques, Procedures (17)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueClassVulnerabilitiesAccess VectorTypeConfidence
1T1006CAPEC-126CWE-21, CWE-22Path TraversalpredictiveHigh
2T1055CAPEC-10CWE-74Improper Neutralization of Data within XPath ExpressionspredictiveHigh
3T1059CAPEC-137CWE-88, CWE-94, CWE-1321Argument InjectionpredictiveHigh
4T1059.007CAPEC-209CWE-79, CWE-80Basic Cross Site ScriptingpredictiveHigh
5TXXXXCAPEC-XXXCWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHigh
6TXXXX.XXXCAPEC-XXXCWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveHigh
7TXXXXCAPEC-XXXCWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveHigh
8TXXXX.XXXCAPEC-XXXCWE-XXXXxxx XxxxxxxxpredictiveHigh
9TXXXXCWE-XXX7xx Xxxxxxxx XxxxxxxxpredictiveHigh
10TXXXXCAPEC-XCWE-XXX, CWE-XXXXxxxxxxxxx XxxxxxpredictiveHigh
11TXXXXCAPEC-XXXCWE-XX, CWE-XXXxx XxxxxxxxxpredictiveHigh
12TXXXXCAPEC-XXCWE-XXXXxxxxxxxx Xxxxxx XxxxpredictiveHigh
13TXXXX.XXXCAPEC-XXXCWE-XXXXxxxxxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHigh
14TXXXX.XXXCAPEC-XXXCWE-XXXXxxxxxxxpredictiveHigh
15TXXXXCAPEC-XXXCWE-XXX, CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHigh
16TXXXXCAPEC-XXXCWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxxxxx XxxxxxpredictiveHigh
17TXXXX.XXXCAPEC-XCWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveHigh

IOA - Indicator of Attack (336)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/admin/category/controller.phppredictiveHigh
2File/admin/create_product.phppredictiveHigh
3File/admin/general.cgipredictiveHigh
4File/admin/reminders/manage_reminder.phppredictiveHigh
5File/API/infopredictiveMedium
6File/backend/admin/his_admin_add_lab_equipment.phppredictiveHigh
7File/Bloodgroop_process.phppredictiveHigh
8File/CCMAdmin/serverlist.asppredictiveHigh
9File/cgi-bin/jumpto.php?class=user&page=config_save&isphp=1predictiveHigh
10File/cgi/get_param.cgipredictiveHigh
11File/csms/admin/inquiries/view_details.phppredictiveHigh
12File/cstecgi.cgipredictiveMedium
13File/dashboard/updatelogo.phppredictiveHigh
14File/ecommerce/support_ticketpredictiveHigh
15File/etc/openshift/server_priv.pempredictiveHigh
16File/forum/away.phppredictiveHigh
17File/home/searchpredictiveMedium
18File/hrm/employeeview.phppredictiveHigh
19File/include/chart_generator.phppredictiveHigh
20File/index.phppredictiveMedium
21File/librarian/bookdetails.phppredictiveHigh
22File/licensespredictiveMedium
23File/members/view_member.phppredictiveHigh
24File/messageboard/view.phppredictiveHigh
25File/mhds/clinic/view_details.phppredictiveHigh
26File/mkshop/Men/profile.phppredictiveHigh
27File/Noxen-master/users.phppredictiveHigh
28File/out.phppredictiveMedium
29File/owa/auth/logon.aspxpredictiveHigh
30File/rest/api/latest/projectvalidate/keypredictiveHigh
31File/spgpm/updateListingpredictiveHigh
32File/spip.phppredictiveMedium
33File/SVFE2/pages/feegroups/country_group.jsfpredictiveHigh
34File/textpattern/index.phppredictiveHigh
35File/uncpath/predictiveMedium
36File/upfile.cgipredictiveMedium
37File/webui/modules/log/operate.mdspredictiveHigh
38File/wordpress/wp-admin/admin.phppredictiveHigh
39File/wuser/anyUserBoundHouse.phppredictiveHigh
40File/_vti_bin/_vti_logpredictiveHigh
41Filexxxxxxx_xxxxxx.xxxpredictiveHigh
42Filexxxxxxx.xxxpredictiveMedium
43Filexxx_xxxx_xxx.xxxpredictiveHigh
44Filexxx_xxxx_xxxx.xxxpredictiveHigh
45Filexxxxx.xxxxxxxxxx.xxxpredictiveHigh
46Filexxxxx.xxxxxxxxx.xxxpredictiveHigh
47Filexxxxx/xxxxxxxxxxx.xxxpredictiveHigh
48Filexxxxx/xxxx_xxxxxxxx.xxxpredictiveHigh
49Filexxxxx/xx_xxxx.xxxpredictiveHigh
50Filexxxxx/xxxxx.xxxpredictiveHigh
51Filexxxxx/xxxxxx.xxxpredictiveHigh
52Filexxxxxxxxxxxxxxxx.xxxpredictiveHigh
53Filexxxxxxxxxxx.xxxpredictiveHigh
54Filexxxxxxxxxxx.xxxpredictiveHigh
55Filexxxxxxxxxxxxxx.xxxpredictiveHigh
56Filexxxx_xxxx_xxxxxxxx.xxxpredictiveHigh
57Filexxxxx_xxxxxx.xxxpredictiveHigh
58Filexx_xxxxxxxxxx.xxxpredictiveHigh
59Filexxx/xxxxxx/xxxx_xxxxxx.xxxpredictiveHigh
60Filexxxxxxxx.xxxxxxx.xxxpredictiveHigh
61Filexxx/xxx.xxxpredictiveMedium
62Filexx_xxxxx_xxxxx.xxxpredictiveHigh
63Filexxxxxx/xxxxxxx/xxxx/xxxxx.xxxpredictiveHigh
64Filexx_xxxx.xxxpredictiveMedium
65Filexxx_xxxxxxxxx.xxxpredictiveHigh
66Filex:\xxxxpredictiveLow
67Filexxxxxx/xxxxx/xxxxx.xxxpredictiveHigh
68Filexxxx_xxxxxxx.xxxpredictiveHigh
69Filexxxxxxxx.xxxpredictiveMedium
70Filexxx-xxx/xxxxxxx.xxpredictiveHigh
71Filexxx-xxx/xxxxxxxxxxxx.xxxpredictiveHigh
72Filexxx-xxx/xxxxxx.xxxpredictiveHigh
73Filexxxxxxxxxxxxxx.xxxpredictiveHigh
74Filexxxxxxxxxxx.xxxpredictiveHigh
75Filexxxxx.xxxxx.xxxpredictiveHigh
76Filexxxxx/xxxxx_xxxxxx.xxxpredictiveHigh
77Filexxxxxxxxxx_xxxxx.xxxpredictiveHigh
78Filexxxxx_xx_xxxxxxxxx.xxxpredictiveHigh
79Filexxxxx_xxxx.xxxpredictiveHigh
80Filexxxxx.xxxpredictiveMedium
81Filexxx.xxx?xxx=xxxxx_xxxxpredictiveHigh
82Filexxxxxxxx_xxxxxxxxxxxxxxxxx.xxxpredictiveHigh
83Filexxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxx/xxx/xxxxxx.xxxxxxxxx.xxxpredictiveHigh
84Filexxxxxxxxxx.xxxpredictiveHigh
85Filexxxxxxxxx.xxxpredictiveHigh
86Filexx_xxxxxxx.xxxpredictiveHigh
87Filexxxxxxx.xxxpredictiveMedium
88Filexxxxxx.xxxpredictiveMedium
89Filexxxxxx.xxxpredictiveMedium
90Filexx.xpredictiveLow
91Filexxxxxxxx.xxxpredictiveMedium
92Filexxxxxxx/xxxxx/xxxxx.xpredictiveHigh
93Filexxxxx.xxxpredictiveMedium
94Filexxxxx.xxxpredictiveMedium
95Filexxxx.xxxpredictiveMedium
96Filexxx/xxxx/xxxx.xpredictiveHigh
97Filexxxxxxxx.xxxpredictiveMedium
98Filexxxxxxxx.xxxpredictiveMedium
99Filexxxxxxxxx.xxxpredictiveHigh
100Filexxxxxx.xxxxpredictiveMedium
101Filexxxx.xxxpredictiveMedium
102Filexxxx.xxxpredictiveMedium
103Filexxxxxxxxxx.xxxpredictiveHigh
104Filexxxxx_xxxxxx.xxxpredictiveHigh
105Filexxxxxxxxx.xxxpredictiveHigh
106Filexxx/xxxxxxxx.xxxpredictiveHigh
107Filexxx/xxxxxx.xxxpredictiveHigh
108Filexxx/xxxxxxxxxxx/xxxxxxx.xxxpredictiveHigh
109Filexxx/xxxxxxx/xxxxxxxxxxxx.xxxpredictiveHigh
110Filexxxxxxx.xxxpredictiveMedium
111Filexxxxxxx/xxxx.xxxpredictiveHigh
112Filexxxxxxxx/xxxx.xxxpredictiveHigh
113Filexxxxx.xxxpredictiveMedium
114Filexxxx.xxxxpredictiveMedium
115Filexxxxx.xpredictiveLow
116Filexxxxxxxxxxxxx.xxxpredictiveHigh
117Filexxxxxxxx/xxxxxxxx_xxxxxxx_xxxxxx/xxxxx.xxxpredictiveHigh
118Filexxxx_xxxx.xxxpredictiveHigh
119Filexxx.xxxxpredictiveMedium
120Filexx.xxxpredictiveLow
121Filexxxxxx.xxxpredictiveMedium
122Filexxxxx.xxxxpredictiveMedium
123Filexxxxx.xxxpredictiveMedium
124Filexxxxx.xxxxpredictiveMedium
125Filexxxxx_xxxxxxx.xxxpredictiveHigh
126Filexxx_xxxxxxxx.xxxpredictiveHigh
127Filexxx/xxxx_xxx.xxxpredictiveHigh
128Filexxxxxxx/xxx.xxxpredictiveHigh
129Filexxx.xxxpredictiveLow
130Filexxx_xxxx.xxxpredictiveMedium
131Filexxxxxx_xx.xxxpredictiveHigh
132Filexxx/xxxxx.xxxxpredictiveHigh
133Filex-xxxx.xxxpredictiveMedium
134Filexxxx.xxxxxxxxx.xxxpredictiveHigh
135Filexxxxxxxxx.xxx.xxxpredictiveHigh
136Filexxxxxx.xxxpredictiveMedium
137Filexxxx.xxxpredictiveMedium
138Filexxxxxxx/xxx/xxxxxxx/xxxxxx/xxxx-xxxxxxxxxx/<xxxxxx>/xx.xxxpredictiveHigh
139Filexxxx.xxxpredictiveMedium
140Filexxxxxxxxx/xxxxxxxxxxxxxx.xxxxpredictiveHigh
141Filexxxxx_xxxxxxx.xxxpredictiveHigh
142Filexxxxx.xxxpredictiveMedium
143Filexxxxx.xxxpredictiveMedium
144Filexxxxxxxx.xxxpredictiveMedium
145Filexxxxxxxxxx.xxxpredictiveHigh
146Filexxxxxxxx.xxxpredictiveMedium
147Filexxxxxxxx.xxxpredictiveMedium
148Filexxxxxxxxxxxx_xxxxxxxx.xxx.xxxpredictiveHigh
149Filexxxxxx.xxxpredictiveMedium
150Filexxxx_xxxx_xxxxxx.xxxpredictiveHigh
151Filexxxx-xxx/xxxxxxxx.xxx?xxxx=xxx_xxxxx.xxxpredictiveHigh
152Filexxxxxx.xxxpredictiveMedium
153Filexxxxxx.xxxpredictiveMedium
154Filexxxx/xxxxxxx/xxxxxxxxxxxxx_xxx.xxxpredictiveHigh
155Filexxxx.xxxpredictiveMedium
156Filexxxx_xxxxxxx_xxxxxxxx.xxxpredictiveHigh
157Filexxxxxxxx.xxx/xxxxxx.xxx/xxxxxxxx.xxxpredictiveHigh
158Filexxxxxxxxxxx.xxxpredictiveHigh
159Filexxx/xxx/xxxx-xxxxxxx.xpredictiveHigh
160Filexxx/xxxx/xxxx/xxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveHigh
161Filexxx/xxx/xxxxxxx/xxxx.xxxpredictiveHigh
162Filexxxxx_xxxxx.xxxpredictiveHigh
163Filexxxxxx_xxxx/xxxxx.xxxpredictiveHigh
164Filexxxx-xxxxx.xxxpredictiveHigh
165Filexxxx-xxxxx.xxxpredictiveHigh
166Filexxxx-xxxxxxxx.xxxpredictiveHigh
167Filexxxxxxxxxxxxxx.xpredictiveHigh
168Filexxx.xpredictiveLow
169Filexxxxx.xxxpredictiveMedium
170Filexxxxxx.xxxpredictiveMedium
171Filexxx.xxxpredictiveLow
172Filexxxx.xxxpredictiveMedium
173Filexxxxxxxxx/xxxxxxx/xxxxx/xxxxxxxxxx/xxxxxxxxxx.xxxpredictiveHigh
174Filexxxxx-xxxxxxxx-xxxxx-xxxxxxxxxxx-xxx-xxxxx.xxxpredictiveHigh
175Filexxxxxxxxx.xpredictiveMedium
176Filexxxxx.xxxxpredictiveMedium
177Filexxxxxxxxx.xxxxpredictiveHigh
178Filexxx/xxxx/xxxxx.xxxpredictiveHigh
179Filexxxxxxx/xxxxxxxxx/xxxxxxxxxxxx.xxxpredictiveHigh
180Filexxxxxxx.xxxpredictiveMedium
181Filexx.xxxpredictiveLow
182Filexxxxxxxxxxxx.xxxpredictiveHigh
183File~/xxxxx-xxxxx.xxxpredictiveHigh
184File~/xxxxxxxx-xxxxxxxx.xxxpredictiveHigh
185Library/_xxx_xxx/xxxxx.xxxpredictiveHigh
186Libraryxxxxxx[xxxxxx_xxxxpredictiveHigh
187Libraryxxxx/xxxxxxx/xxxx/xxxxxxxxx/xxxxx.xxxpredictiveHigh
188Libraryxxx/xxxxxx.xpredictiveMedium
189Library~/xxx/xxxxx-xxxxxxxx-xxxxxxxxxx.xxxpredictiveHigh
190Argumentxxx_xxxxpredictiveMedium
191Argumentxx_xxpredictiveLow
192ArgumentxxxxxxpredictiveLow
193Argumentxxx_xxpredictiveLow
194ArgumentxxpredictiveLow
195ArgumentxxpredictiveLow
196ArgumentxxxxxxxxpredictiveMedium
197ArgumentxxxxxxxxpredictiveMedium
198ArgumentxxxxxpredictiveLow
199ArgumentxxxxpredictiveLow
200Argumentxxxx_xxx_xxxxpredictiveHigh
201ArgumentxxxpredictiveLow
202ArgumentxxxxxxxxxxpredictiveMedium
203ArgumentxxxxxxxxxxpredictiveMedium
204Argumentxxxxxxxx_xxxxpredictiveHigh
205Argumentxxx_xxpredictiveLow
206Argumentxx_xxxxxxpredictiveMedium
207ArgumentxxxxpredictiveLow
208Argumentxxxx_xxpredictiveLow
209ArgumentxxxxxxxxxpredictiveMedium
210ArgumentxxxxxxpredictiveLow
211ArgumentxxxxxxxxxxpredictiveMedium
212Argumentxxxxxx[xxxxxx_xxxx]predictiveHigh
213Argumentxxxx_xxpredictiveLow
214Argumentxxxxxx_xxxx_xxxxxxxxpredictiveHigh
215ArgumentxxxxxxxxxxxxpredictiveMedium
216ArgumentxxxxxxxxxxxxxxxxpredictiveHigh
217ArgumentxxxxxxxxpredictiveMedium
218Argumentx_xxxx_xxxxxxpredictiveHigh
219ArgumentxxxxpredictiveLow
220Argumentxxxx/xxxxxx/xxxpredictiveHigh
221ArgumentxxxxxxxpredictiveLow
222ArgumentxxxxxxxpredictiveLow
223ArgumentxxxxxpredictiveLow
224ArgumentxxxxxxxxxxxpredictiveMedium
225Argumentxxxxx_xxxx_xxxxpredictiveHigh
226Argumentxxx_xxxx/xxx_xxxx/xxx_xxxxxx/xxx_xxxx/xxx_xxxx/xxx_xxxxxx/xxx_xxxpredictiveHigh
227Argumentxxxxxxx=xxxxxxxxpredictiveHigh
228ArgumentxxxxpredictiveLow
229ArgumentxxxxxxxpredictiveLow
230Argumentxx_xxpredictiveLow
231Argumentxxxxxxx_xxxxxxxpredictiveHigh
232Argumentxxxxxxxxxxxxxx[xxxxxxxxxxxxxxxxxx]predictiveHigh
233ArgumentxxxxxxxxpredictiveMedium
234ArgumentxxxxpredictiveLow
235ArgumentxxxxpredictiveLow
236ArgumentxxxxxxxxpredictiveMedium
237ArgumentxxxxpredictiveLow
238ArgumentxxpredictiveLow
239Argumentxx/xx_xxxxxx_xxxx/xx_xxxx_xxxxxxpredictiveHigh
240ArgumentxxxxxxxxxpredictiveMedium
241Argumentxx_xxxxxpredictiveMedium
242ArgumentxxxxxpredictiveLow
243Argumentxxx_xxxxxxxxpredictiveMedium
244ArgumentxxxxpredictiveLow
245ArgumentxxxxxxpredictiveLow
246Argumentxxxx_xxpredictiveLow
247ArgumentxxxxpredictiveLow
248Argumentxxxxxxxx_xxxpredictiveMedium
249Argumentxxx_xxxpredictiveLow
250ArgumentxxxxxxxpredictiveLow
251ArgumentxxxpredictiveLow
252ArgumentxxxxpredictiveLow
253Argumentxxx_xxxx_xxxxpredictiveHigh
254Argumentxxx_xxpredictiveLow
255ArgumentxxxpredictiveLow
256Argumentxx_xxxxpredictiveLow
257Argumentxxx/xxxxxxxxxpredictiveHigh
258Argumentxxxxxxxxx[xxxxxxxxx][]predictiveHigh
259Argumentxxxxxxxxx_xxxxxxxx_xxxxpredictiveHigh
260ArgumentxxxxxpredictiveLow
261Argumentxxxxxxx_xxxxpredictiveMedium
262ArgumentxxxxpredictiveLow
263ArgumentxxxxpredictiveLow
264Argumentxxxx/xxxxxxxx/xxx/xxx/xxxxxxxx/xxxxxxxpredictiveHigh
265Argumentxxxxxxx_xxpredictiveMedium
266Argumentxx_xxpredictiveLow
267ArgumentxxxxpredictiveLow
268Argumentxxx_xxx[]predictiveMedium
269ArgumentxxxxxxxxpredictiveMedium
270ArgumentxxxxpredictiveLow
271Argumentxxxx_xx_xx_xxxpredictiveHigh
272ArgumentxxxxxxxpredictiveLow
273Argumentxxx_xxxxxxxxxxxpredictiveHigh
274ArgumentxxxxxxxxxxxxxpredictiveHigh
275ArgumentxxxxxxxxxpredictiveMedium
276Argumentxxxxx_xxxx_xxxxpredictiveHigh
277ArgumentxxxxxxxxxxxxpredictiveMedium
278ArgumentxxxxxpredictiveLow
279ArgumentxxxxxxxpredictiveLow
280Argumentxx_xxxxpredictiveLow
281Argumentxx_xxxxpredictiveLow
282ArgumentxxxxxxpredictiveLow
283ArgumentxxxxxxxxpredictiveMedium
284ArgumentxxxxxxxxxxxpredictiveMedium
285ArgumentxxxxxpredictiveLow
286Argumentxxxxxxx_xxpredictiveMedium
287ArgumentxxxxxxpredictiveLow
288ArgumentxxxpredictiveLow
289ArgumentxxxxxxpredictiveLow
290Argumentxxxxxx_xxxxxxpredictiveHigh
291ArgumentxxxpredictiveLow
292Argumentxxxxxx_xxxpredictiveMedium
293Argumentxxxx_xxxxpredictiveMedium
294ArgumentxxxxxxxpredictiveLow
295Argumentxxxxxx_xxpredictiveMedium
296Argumentxxxxxxx_xxpredictiveMedium
297ArgumentxxxxxxpredictiveLow
298Argumentxx_xxxxx_xxxx_xxxxpredictiveHigh
299ArgumentxxpredictiveLow
300ArgumentxxxxpredictiveLow
301ArgumentxxxxxxxxxpredictiveMedium
302ArgumentxxxxxxxxxxpredictiveMedium
303Argumentxxxxx_xxxxpredictiveMedium
304ArgumentxxxxxxxpredictiveLow
305Argumentxxxxxx xxxx/xxxxxx xxxxx xxxxpredictiveHigh
306ArgumentxxxxxxxxxxpredictiveMedium
307Argumentxxxxxxxxxx_xxpredictiveHigh
308Argumentxxxxxxxxxx_xxxxxxxx/xxxxxx_xxxxxxxx/xxxxxx_xxxxxxxxpredictiveHigh
309ArgumentxxxxpredictiveLow
310Argumentxxxx_xxpredictiveLow
311ArgumentxxxpredictiveLow
312ArgumentxxxpredictiveLow
313Argumentxxxx.xxxxxpredictiveMedium
314Argumentxxxx/xxxxxxxxxxxpredictiveHigh
315Argumentxxxxxxxx:x_xxxx/xxxxxxxx:x_xxxx/xxxxxxxx:x_xxxxpredictiveHigh
316ArgumentxxxxxxpredictiveLow
317ArgumentxxxxxxxxpredictiveMedium
318Argumentxxxx_xxpredictiveLow
319ArgumentxxxxxpredictiveLow
320ArgumentxxxxpredictiveLow
321ArgumentxxxxxxxxxxxpredictiveMedium
322Argumentx-xxxxxxxxx-xxxxxxpredictiveHigh
323Argumentxxxxx/xxxxxpredictiveMedium
324Argumentxx_xxxxpredictiveLow
325Input Value"><xxxxxx>xxxxx(/xxx/)</xxxxxx>predictiveHigh
326Input Value' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxxpredictiveHigh
327Input Value..predictiveLow
328Input Valuex%xxxxxxx%xxxxxxxx%xxx,xxxxxx_xx%xxxxxx,xx_xxxxxxx,xxxxxxxx%xx,x,x,x,x,x,x,x,xx,xx,xx,xx,xx,xx,xx,xx,xx%xxxxxx%xxxxxxxxxx%xxxxxxx%xxxx%xxxpredictiveHigh
329Input Value<xxx%xxxxx='xxxx://xxx.xxxx.xx/xxxx.xxx'%xxxxxxx='xxxxxx:%xxxxx%xxxxxxx%xxxxxxx;'>predictiveHigh
330Input Value<xxxxxx>xxxxx(x)</xxxxxx>predictiveHigh
331Input Valuexxxxx' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx) xxx 'xxxx'='xxxx&xxxxxxxx=xxxxxxxxxxpredictiveHigh
332Input Valuexxxxx"><xxxxxx>xxxxx(%xxxxxxxxxxxx%xx)</xxxxxx>predictiveHigh
333Input Value\xxx../../../../xxx/xxxxxxpredictiveHigh
334Pattern() {predictiveLow
335Patternxxxxxxx-xxxx|xx| xxxx/xxxxpredictiveHigh
336Patternxxxx /xpredictiveLow

References (13)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

This view requires CTI permissions

Just purchase a CTI license today!