Arid Viper Analysis

IOB - Indicator of Behavior (360)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en348
fr6
de4
pl2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

us342
de12
pl2
fr2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Microsoft Internet Explorer2
GetSimpleCMS2
systemd2
Big Webmaster Big Webmaster Guestbook Script2
Facebook WhatsApp2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1jforum User input validation5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.040.04499CVE-2019-7550
2Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25kCalculatingHighWorkaround0.040.04187CVE-2007-1192
3DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.660.04187CVE-2010-0966
4Dreaxteam Xt-News add_comment.php cross site scripting4.34.2$0-$5kCalculatingHighUnavailable0.010.02945CVE-2006-6746
5Enigma2 Coppermine Bridge e2_header.inc.php file inclusion9.89.8$0-$5kCalculatingNot DefinedNot Defined0.000.06790CVE-2006-6864
6IBM WebSphere Service Registry/Repository Access Restriction access control4.34.1$25k-$100k$0-$5kNot DefinedOfficial Fix0.030.01061CVE-2014-6160
7Big Webmaster Big Webmaster Guestbook Script addguest.cgi cross site scripting4.33.9$0-$5kCalculatingProof-of-ConceptOfficial Fix0.070.01319CVE-2006-2231
8Facebook WhatsApp MP4 File stack-based overflow7.06.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.010.01404CVE-2019-11931
9Remote Clinic register.php cross site scripting4.44.4$0-$5k$0-$5kNot DefinedNot Defined0.010.02192CVE-2021-30044
10uftpd ftpcmd.c handle_PORT stack-based overflow6.55.7$0-$5k$0-$5kNot DefinedOfficial Fix0.030.00890CVE-2020-5204
11InfoVista VistaPortal SE PresentSpace.jsp Reflected cross site scripting5.25.2$0-$5kCalculatingNot DefinedNot Defined0.000.00885CVE-2018-19767
12TP-LINK TD-8840t HTTP Request tools_admin_1 cross-site request forgery4.64.2$0-$5k$0-$5kProof-of-ConceptNot Defined0.040.00000
13MGB OpenSource Guestbook email.php sql injection7.37.3$0-$5k$0-$5kHighUnavailable0.700.02800CVE-2007-0354
14GetSimpleCMS index.php redirect6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.060.00885CVE-2019-9915
15Open-school index.php sql injection7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00986CVE-2009-4208
16Apple Safari WebKit HTTP Authorization HTTP Header Logging information disclosure7.56.7$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.000.00954CVE-2012-0647
17DotNetNuke DnnImageHandler server-side request forgery7.47.1$0-$5k$0-$5kNot DefinedOfficial Fix0.060.73020CVE-2017-0929
18PHP Album language.php file_exists memory corruption7.36.9$0-$5kCalculatingProof-of-ConceptNot Defined0.030.15607CVE-2006-1839
19Sphider file inclusion5.65.3$0-$5kCalculatingProof-of-ConceptNot Defined0.020.04482CVE-2006-1784
20Microsoft Internet Explorer Scripting Engine information disclosure5.75.5$25k-$100k$0-$5kNot DefinedOfficial Fix0.020.06416CVE-2017-11919

IOC - Indicator of Compromise (7)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (6)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnerabilitiesAccess VectorTypeConfidence
1T1059CWE-94Cross Site ScriptingpredictiveHigh
2T1059.007CWE-79, CWE-80Cross Site ScriptingpredictiveHigh
3TXXXXCWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHigh
4TXXXX.XXXCWE-XXXXxxx XxxxxxxxpredictiveHigh
5TXXXXCWE-XXXxx XxxxxxxxxpredictiveHigh
6TXXXXCWE-XXXXxxxxxxxxxxxxpredictiveHigh

IOA - Indicator of Attack (28)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1Fileaddguest.cgipredictiveMedium
2Fileadd_comment.phppredictiveHigh
3Fileadmin/index.phppredictiveHigh
4Filedata/gbconfiguration.datpredictiveHigh
5Filexx_xxxxxx.xxx.xxxpredictiveHigh
6Filexxxxx.xxxpredictiveMedium
7Filexxxxx/xxxxx_xxxxx_xpredictiveHigh
8Filexxxxxx.xpredictiveMedium
9Filexx.xxxpredictiveLow
10Filexxx/xxxxxx.xxxpredictiveHigh
11Filexxxxx.xxxpredictiveMedium
12Filexxxxxxxxxxx.xxxpredictiveHigh
13Filexxxxxx/xxxxxx/xxxx.xpredictiveHigh
14Filexxxxxxxx.xxxpredictiveMedium
15Filexxxxxxxxxxxx.xxxpredictiveHigh
16Filexxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxxpredictiveHigh
17Filexxxxx/xxxxxxxx.xxxpredictiveHigh
18ArgumentxxxxxxxxpredictiveMedium
19ArgumentxxxxxxxxpredictiveMedium
20Argumentxxxxxxxxxxxx/xxxxxxxpredictiveHigh
21Argumentxxxx/xxxxpredictiveMedium
22ArgumentxxxxxxxxxpredictiveMedium
23Argumentxxxx_xxxpredictiveMedium
24Argumentxxxxx xxxx/xxxx xxxxpredictiveHigh
25ArgumentxxpredictiveLow
26Argumentxx_xxxxpredictiveLow
27ArgumentxxxxxxxxpredictiveMedium
28Argumentxxxxxxxx_xxxpredictiveMedium

References (3)

The following list contains external sources which discuss the actor and the associated activities:

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!