BazarLoader Analysis

IOB - Indicator of Behavior (166)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en134
zh22
de4
ru4
fr2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

us54
cn34
ru30
gb6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Linux Kernel6
Mavili Guestbook4
Google Android4
Redis2
Adobe InDesign2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25k$0-$5kHighWorkaround0.040.04187CVE-2007-1192
2phpMyAdmin Privileges.php sql injection7.16.8$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.01034CVE-2020-10804
3Linux Kernel fbcon vt.c KD_FONT_OP_COPY out-of-bounds5.04.8$0-$5k$0-$5kNot DefinedOfficial Fix0.010.01034CVE-2020-28974
4Magento Sitemap code injection5.95.7$0-$5k$0-$5kNot DefinedOfficial Fix0.020.01156CVE-2019-7932
5Linux Kernel OverlayFS Subsystem permissions6.36.3$5k-$25k$5k-$25kNot DefinedNot Defined0.060.01005CVE-2021-3847
6Magento Search Module sql injection7.37.3$0-$5k$0-$5kNot DefinedNot Defined0.060.00885CVE-2021-21024
7Oracle JavaFX Remote Code Execution9.89.4$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.040.01319CVE-2013-1477
8Mavili Guestbook access control5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.030.01213CVE-2012-5298
9Mavili Guestbook edit.asp access control7.37.3$0-$5k$0-$5kNot DefinedNot Defined0.010.01213CVE-2012-5299
10Saphp SaphpLesson misc.php sql injection7.37.3$0-$5k$0-$5kNot DefinedUnavailable0.030.00986CVE-2006-3161
11Zoho ManageEngine ServiceDesk Plus FileDownload.jsp path traversal5.35.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.010.01055CVE-2011-2757
12TinyMCE Core Parser/Paste Plugin/Visualchars Plugin cross site scripting5.24.9$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00885CVE-2020-17480
13Aruba Networks ArubaOS PAPI command injection9.89.6$5k-$25k$5k-$25kNot DefinedOfficial Fix0.030.01156CVE-2022-37897
14Citrix ADC/Gateway resource control9.89.6$5k-$25k$0-$5kNot DefinedOfficial Fix0.040.01156CVE-2022-27518
15Cisco ATA 190 Discovery Protocol Packet command injection7.37.0$5k-$25k$0-$5kNot DefinedOfficial Fix0.080.00885CVE-2022-20689
16Brocade SANnav permission3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.010.00885CVE-2020-15385
17Check Point Mobile Access/SSL VPN Portal Agent os command injection5.55.3$0-$5k$0-$5kNot DefinedOfficial Fix0.070.00885CVE-2021-30358
18MicroStrategy Enterprise Manager pathname traversal6.35.7$0-$5k$0-$5kProof-of-ConceptNot Defined0.020.00885CVE-2022-29596
19Chcnav P5E GNSS sys_username_passwd.cmd information disclosure5.65.6$0-$5k$0-$5kNot DefinedNot Defined0.040.00885CVE-2022-30622
20Cisco Small Business RV345 buffer overflow9.59.4$25k-$100k$5k-$25kNot DefinedOfficial Fix0.080.01156CVE-2022-20842

Campaigns (3)

These are the campaigns that can be associated with the actor:

IOC - Indicator of Compromise (162)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsTypeConfidence
13.101.57.185ec2-3-101-57-185.us-west-1.compute.amazonaws.comBazarLoaderverifiedMedium
25.45.97.127v22018107054674935.goodsrv.deBazarLoaderverifiedHigh
35.135.183.146freya.stelas.deBazarLoaderverifiedHigh
413.56.161.214ec2-13-56-161-214.us-west-1.compute.amazonaws.comContiBazarLoaderverifiedMedium
513.225.230.232server-13-225-230-232.jfk51.r.cloudfront.netBazarLoaderverifiedHigh
613.226.32.216server-13-226-32-216.ewr53.r.cloudfront.netBazarLoaderverifiedHigh
718.67.60.164server-18-67-60-164.iad89.r.cloudfront.netBazarLoaderverifiedHigh
823.56.10.219a23-56-10-219.deploy.static.akamaitechnologies.comBazarLoaderverifiedHigh
923.62.25.178a23-62-25-178.deploy.static.akamaitechnologies.comBazarLoaderverifiedHigh
1023.82.19.173BazarLoaderverifiedHigh
1123.94.51.8023-94-51-80-host.colocrossing.comBazarLoaderAnchorverifiedHigh
1223.95.238.12223-95-238-122-host.colocrossing.comBazarLoaderverifiedHigh
1323.106.160.77BazarLoaderverifiedHigh
1423.106.215.61BazarLoaderverifiedHigh
1523.106.223.174BazarLoaderverifiedHigh
1623.152.0.22anahiem.netBazarLoaderDiavolverifiedHigh
1723.160.193.217unknown.ip-xfer.netBazarLoaderverifiedHigh
1823.193.217.119a23-193-217-119.deploy.static.akamaitechnologies.comBazarLoaderverifiedHigh
1931.14.40.160perico.cavepanel.comContiBazarLoaderverifiedHigh
2031.41.44.153rodion.oftin.93.example.comBazarLoaderverifiedHigh
2131.171.251.118ch.ns.mon0.liBazarLoaderverifiedHigh
2231.214.240.203BazarLoaderverifiedHigh
2334.209.40.84ec2-34-209-40-84.us-west-2.compute.amazonaws.comBazarLoaderverifiedMedium
2434.210.71.206ec2-34-210-71-206.us-west-2.compute.amazonaws.comBazarLoaderAnchorverifiedMedium
2534.219.130.241ec2-34-219-130-241.us-west-2.compute.amazonaws.comContiBazarLoaderverifiedMedium
2634.221.188.35ec2-34-221-188-35.us-west-2.compute.amazonaws.comBazarLoaderverifiedMedium
2734.222.222.126ec2-34-222-222-126.us-west-2.compute.amazonaws.comBazarLoaderverifiedMedium
2835.165.197.209ec2-35-165-197-209.us-west-2.compute.amazonaws.comBazarLoaderverifiedMedium
2940.76.4.15BazarLoaderverifiedHigh
3040.112.72.205BazarLoaderverifiedHigh
3140.113.200.201BazarLoaderverifiedHigh
3245.14.226.23BazarLoaderverifiedHigh
3345.71.112.70host-45-71-112-70.nedetel.netBazarLoaderverifiedHigh
34XX.XX.XXX.XXxx.xx.xxx.xx.xxxxx.xxxXxxxxxxxxxxverifiedMedium
35XX.XX.XX.XXXxxxxxxxx.xx.xxxxxxxXxxxxxxxxxxverifiedHigh
36XX.XX.XX.XXXxxxxxxxx.xx.xxxxxxxXxxxxxxxxxxverifiedHigh
37XX.XX.XX.XXXxxxxxxxx.xx.xxxxxxxXxxxxxxxxxxverifiedHigh
38XX.XX.XX.XXXxxxxxxxx.xx.xxxxxxxXxxxxxxxxxxverifiedHigh
39XX.XX.XX.XXXxxxx.xxXxxxxxxxxxxverifiedHigh
40XX.XX.XX.XXXxxxx.xxxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
41XX.XX.XX.XXXxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
42XX.XXX.XXX.XXXXxxxxxxxxxxverifiedHigh
43XX.XXX.XX.XXXxxxxx.xx-xx-xxx-xx.xxXxxxxxxxxxxverifiedHigh
44XX.XXX.XXX.XXXxxx.xxx.xxx.xx.xxxxxxxx-xxxx.xxxXxxxxxxxxxxverifiedHigh
45XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxxxxxxXxxxxxverifiedMedium
46XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxxxxxxverifiedMedium
47XX.XXX.XXX.XXxxx-xx-xxx-xxx-xx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxxxxxxverifiedMedium
48XX.XXX.XXX.XXxxx-xx-xxx-xxx-xx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxxxxxxverifiedMedium
49XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxxxxxxXxxxxxverifiedMedium
50XX.XXX.XX.XXXxxxxxxxxxxverifiedHigh
51XX.XXX.XXX.XXxxx-xx-xxx-xxx-xx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxxxxxxXxxxxxverifiedMedium
52XX.XXX.XX.XXXXxxxxxxxxxxverifiedHigh
53XX.XXX.XX.XXXxxxx.xxxxxx.xxxXxxxxxxxxxxverifiedHigh
54XX.XXX.XXX.XXXxxxxxxxxxxxxxxxxx.xxxxxxx.xxxXxxxxxxxxxxverifiedHigh
55XX.XXX.XXX.XXXxxxxxxxxxxxxxxx.xxxxxxx.xxxXxxxxxxxxxxverifiedHigh
56XX.XXX.XXX.XXXxxxxxxxxxxXxxxxxverifiedHigh
57XX.XXX.XX.XXXxxxxxxxxxxverifiedHigh
58XX.XXX.XX.XXxxxxx-xxx-xxxxxx-xxxxxxxx.xxxxx.xxxxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
59XX.XXX.XXX.XXxx-xxx-xxx-xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
60XX.XX.XX.XXXXxxxxxxxxxxverifiedHigh
61XX.X.XXX.XXxxxxx-xxxxxx-xxxx.xxxx.xxxxx.xxx.xxx.xxxxx.xxxXxxxxxxxxxxverifiedHigh
62XX.X.XXX.XXxxxxx-xxxxxx-xxxx.xxxx.xxxxx.xxx.xxx.xxxxx.xxxXxxxxxxxxxxverifiedHigh
63XX.X.XXX.XXxxxxx-xxxxxx-xxxx.xxxx.xxxxx.xxx.xxx.xxxxx.xxxXxxxxxxxxxxverifiedHigh
64XX.XXX.XXX.XXxxxxxxxxx.xxxxxx.xxxXxxxxxxxxxxverifiedHigh
65XX.XX.XXX.XXXxxxxxxxxxxxxxx.xxxx.xxxxxxxXxxxxxxxxxxverifiedHigh
66XX.XX.XX.XXXXxxxxxxxxxxverifiedHigh
67XX.XXX.XX.XXxxxxxxxxxx.xxxxx.xxXxxxxxxxxxxverifiedHigh
68XX.XXX.XXX.XXXXxxxxxxxxxxverifiedHigh
69XX.XX.XXX.XXXxxxxxxxxxxverifiedHigh
70XX.XX.XX.XXXxxxxxxxxxxverifiedHigh
71XX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
72XX.XXX.XXX.XXxxxx.xxxxxxx.xxXxxxxxxxxxxverifiedHigh
73XX.XXX.XX.XXXxxxxx.xx-xx-xxx-xx.xxXxxxxxxxxxxverifiedHigh
74XX.XX.XXX.XXXxxxx.xxxxxx-xxxxxxx.xxXxxxxxxxxxxverifiedHigh
75XX.XXX.XXX.XXXXxxxxxxxxxxverifiedHigh
76XX.XXX.XXX.XXXxxxxxxxxxxverifiedHigh
77XX.XXX.XX.XXXxxxxxxxx.xxx-xxxxxxxx.xxXxxxxxxxxxxverifiedHigh
78XX.XXX.XX.XXXXxxxxxxxxxxverifiedHigh
79XX.XX.XX.XXXxxx-xx-xx-xxx.xxxxxx.xxxxxx.xxxxxxxxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
80XX.XXX.XX.XXXxxxxx-xxxxxx-xxxx.xxxx.xxxxx.xxx.xxx.xxxxx.xxxXxxxxxxxxxxverifiedHigh
81XX.XXX.XX.XXXxxxxx-xxxxxx-xxxx.xxxx.xxxxx.xxx.xxx.xxxxx.xxxXxxxxxxxxxxverifiedHigh
82XXX.XX.XX.XXxxxxxxxxxxverifiedHigh
83XXX.XX.XX.XXXXxxxxxxxxxxverifiedHigh
84XXX.XX.XX.XXXXxxxxxxxxxxverifiedHigh
85XXX.XX.XXX.XXXxxx.xxx.xx.xxx.xx-xxxx.xxxxXxxxxxxxxxxverifiedHigh
86XXX.XX.XX.XXXxxxx-xx-xx-xxx.xxxxxx.xxxxxx.xxxxxxxxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
87XXX.XXX.XXX.XXxxxx-xxx-xxx-xx.xxxxxx.xxxxxx.xxxxxxxxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
88XXX.XXX.XX.XXXxxxx-xxx-xx-xxx.xxxxxx.xxxxxx.xxxxxxxxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
89XXX.XXX.XX.XXXXxxxxxxxxxxverifiedHigh
90XXX.XXX.XXX.XXXxxxxxxxxxxverifiedHigh
91XXX.XXX.XX.XXXXxxxxxxxxxxverifiedHigh
92XXX.XXX.XX.Xxx-xxxxxxx-xxxx-xxxxxx-xxx-xxxxxxxx.xxxxx.xxxxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
93XXX.XXX.XX.XXXXxxxxxxxxxxverifiedHigh
94XXX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxxxxverifiedHigh
95XXX.XXX.XX.XXXxxxxxxxxxxverifiedHigh
96XXX.X.XXX.XXXxxxxx.xx-xxx-x-xxx.xxxXxxxxxxxxxxverifiedHigh
97XXX.X.XXX.XXxxxxx.xx-xxx.xxxxxx.xxxXxxxxxxxxxxverifiedHigh
98XXX.XX.XXX.XXxxxxxxx.xxxx.xxxXxxxxxxxxxxverifiedHigh
99XXX.XXX.XX.XXXxxxxxxxxxxXxxxxxverifiedHigh
100XXX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
101XXX.XX.XXX.XXXxxxxxxxxxx.xxxxxxx.xxxxXxxxxxxxxxxverifiedHigh
102XXX.XX.XXX.XXXxxxxxxxxxxverifiedHigh
103XXX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
104XXX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
105XXX.XX.XX.XXXxxxxxx.xxx.xx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxxxxverifiedHigh
106XXX.XXX.XX.XXXxxxx.xxxxxxxxxxxxx.xx.xxXxxxxXxxxxxxxxxxverifiedHigh
107XXX.XXX.XXX.XXxxx.xxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
108XXX.XX.XXX.XXXxxxxxxxx.xxxxxxxxx.xxx.xxXxxxxxxxxxxverifiedHigh
109XXX.XXX.XXX.XXxx-xxx-xxx-xxx.xxxxxxxxx.xxx.xxxxxXxxxxxxxxxxverifiedHigh
110XXX.XX.XXX.XXXxxxxxxxxxxverifiedHigh
111XXX.XX.XXX.XXxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
112XXX.XX.XXX.XXXxxxxxxxxxxverifiedHigh
113XXX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
114XXX.XXX.XXX.XXXxxxx.xxxxxx.xxxXxxxxxxxxxxverifiedHigh
115XXX.XXX.XXX.XXxxxxxxxxxxx.xx-xxxxxXxxxxxxxxxxverifiedHigh
116XXX.XXX.XX.XXXxxxxxxxxxxverifiedHigh
117XXX.XXX.XXX.XXXxxxxxx.xxxxx.xxXxxxxxxxxxxverifiedHigh
118XXX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
119XXX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
120XXX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
121XXX.XX.XXX.XXXxxxxxxxxxxverifiedHigh
122XXX.XX.XXX.XXxxxxxx.xxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
123XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
124XXX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
125XXX.XX.XXX.XXxxxxxxxxxxverifiedHigh
126XXX.XX.XXX.XXxxxxxxxxxxverifiedHigh
127XXX.XXX.XXX.XXXxxxxxxxxxxverifiedHigh
128XXX.XXX.XX.XXXxxxxxxx.xxxx.xxxxXxxxxxxxxxxverifiedHigh
129XXX.XX.XXX.XXXxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
130XXX.XX.X.XXXxxx-xxx-xx-x-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxxxxxxverifiedMedium
131XXX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
132XXX.XX.XXX.XXXxxx.xx.xxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
133XXX.XXX.XXX.XXXxxxxxxxxxxxxx.xxxxxxx.xxXxxxxxxxxxxverifiedHigh
134XXX.XXX.XXX.XXXxxxxxx.xxxxx.xxXxxxxxxxxxxverifiedHigh
135XXX.XXX.XX.XXXxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
136XXX.XXX.XXX.XXXXxxxxxxxxxxverifiedHigh
137XXX.XXX.XXX.XXXxxxxx.xxxXxxxxxxxxxxverifiedHigh
138XXX.XX.XXX.XXXxxxx.xxxxxxxxxxxxxx.xxXxxxxxxxxxxXxxxxxverifiedHigh
139XXX.XX.XXX.XXXxxx-xxx-xx-xxx-xxx.xxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
140XXX.XX.XX.XXXxxxxx.xx-xxx-xx-xx.xxxXxxxxxxxxxxverifiedHigh
141XXX.XXX.XXX.XXXxxxx.xxxxxxx.xxxXxxxxxxxxxxverifiedHigh
142XXX.XXX.XX.XXXXxxxxxxxxxxverifiedHigh
143XXX.XXX.XXX.XXXxxxxx-xxxxxx.xxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
144XXX.X.XXX.XXXxxxxxxxxx.xxx-xxxx.xxXxxxxxxxxxxverifiedHigh
145XXX.XXX.XX.XXXxxxxxxxxxxverifiedHigh
146XXX.X.XXX.XXXXxxxxxxxxxxverifiedHigh
147XXX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
148XXX.XX.XXX.XXXxxxxx.xxxXxxxxxxxxxxverifiedHigh
149XXX.XX.XXX.XXXxxxxxx.xxxxxxxxxxxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
150XXX.XX.XXX.XXxxxx.xxxxxxxxx.xxXxxxxxxxxxxverifiedHigh
151XXX.XX.XXX.XXXXxxxxxxxxxxverifiedHigh
152XXX.XXX.XXX.XXxxxx-xxxxxxxxxx.xxxxxxxxxxx.xxxXxxxxxxxxxxXxxxxxverifiedHigh
153XXX.XXX.XXX.Xxxxxxxxxxxxxxxxxx.xxxxxxx.xxXxxxxxxxxxxverifiedHigh
154XXX.XX.XXX.XXXxxx.xx.xxx.xxxxxxx.xxxxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
155XXX.XXX.XXX.XXxxxx.xx-xxx-xxx-xxx.xxXxxxxxxxxxxverifiedHigh
156XXX.XXX.XXX.XXXxx-xxxxxxx-xx-xxxxxxxx.xxxxxxx.xxx.xxxxxx.xxxXxxxxxxxxxxverifiedHigh
157XXX.XXX.XX.XXXXxxxxxxxxxxXxxxxxverifiedHigh
158XXX.XX.XXX.XXXxxx.xxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
159XXX.XX.XXX.XXXxxx.xxxxxxxx.xxxXxxxxxxxxxxverifiedHigh
160XXX.XXX.XX.XXXxxxxx.xxx-xxx-xx.xxxxxx.xxxxxxxxxxxx.xxxXxxxxxxxxxxXxxxxxverifiedHigh
161XXX.XX.XXX.XXxxxxx.xxxxxxx.xxxXxxxxxxxxxxverifiedHigh
162XXX.XX.XX.XXXxxxxxxxxxxxxxxxxxxxx.xxxxx.xxxXxxxxxxxxxxverifiedHigh

TTP - Tactics, Techniques, Procedures (14)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (82)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/apipredictiveLow
2File/api/sys_username_passwd.cmdpredictiveHigh
3File/include/makecvs.phppredictiveHigh
4File/PluXml/core/admin/parametres_edittpl.phppredictiveHigh
5File/requests.phppredictiveHigh
6File/usr/local/psa/admin/sbin/wrapperpredictiveHigh
7File/wp-admin/admin.php?page=wp_file_manager_propertiespredictiveHigh
8Fileadd.phppredictiveLow
9Fileadmin/admin.shtmlpredictiveHigh
10Filebpf-object-fuzzer.cpredictiveHigh
11Filexxx.xxxpredictiveLow
12Filexxx.xxxpredictiveLow
13Filexxxxx.xxxxxxxxx.xxxpredictiveHigh
14Filexxxxxxxxxx.xxxpredictiveHigh
15Filexxx.xxxpredictiveLow
16Filexxxxxxxx/xxx.xxx?xxxx=xxxxxxxpredictiveHigh
17Filexxxxxxxxxx/xxxxxx/xxxxxxxxx.xxxx/xxxx.xxx/predictiveHigh
18Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
19Filexxxxxxx.xxxpredictiveMedium
20Filexxxxxx.xxxpredictiveMedium
21Filexxxxxxx/xxx/xx/xx.xpredictiveHigh
22Filexxxx.xxxpredictiveMedium
23Filexxxxx.xxxpredictiveMedium
24Filexxxx/xxxxxxxxxx/xxxxxx-xxxxxxxxx.xpredictiveHigh
25Filexxxxxx.xxxpredictiveMedium
26Filexxxxxxxxxxxxxxxxxxxx.xxxpredictiveHigh
27Filexxxxxxxxxxxx.xxxpredictiveHigh
28Filexxxx.xxxpredictiveMedium
29Filexxx/xxxxxx.xxxpredictiveHigh
30Filexxxxx.xxxpredictiveMedium
31Filexxxx.xxxpredictiveMedium
32Filexxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxxpredictiveHigh
33Filexxxxxxxx_xxxxxxx.xxxpredictiveHigh
34Filexxxx.xxxpredictiveMedium
35Filexxxxxxx.xxxpredictiveMedium
36Filexxxxxx.xxx/xxxx_xxxx_xxxx.xxxpredictiveHigh
37Filexxxxxxxx/xxxxxx-xxxxx/xxxxxxxxxxx/xxxx.xxpredictiveHigh
38Filexxxxxxx/xxx/xxxxx/xxxxx.xxxxxx.xxxpredictiveHigh
39Filexxxxx_xxxxxxxx.xxxpredictiveHigh
40Filexxxxxxxxxxx.xxxpredictiveHigh
41Filexxxxx.xxxpredictiveMedium
42Filexxxxxxxx.xxxpredictiveMedium
43Filexxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxxpredictiveHigh
44Filexx_xxx.xxpredictiveMedium
45Filexxxxxxxx.xx?xxxxxxxxxxxx=xxxxxxxx&xxxx=x-xxxx&xxxxxxxx=xxxxxxxxxx&xxpredictiveHigh
46Filexxxx.xxxpredictiveMedium
47Filexxxxxx.xxxxx.xxxpredictiveHigh
48Filexxxxxx/xxxxx/xx/xxxxxxxxxx/xxxxxxx/xxxxxxxxxx/xxxxxx/xxxxxxxxx.xxxpredictiveHigh
49Filexxxxxxxx.xxxpredictiveMedium
50Filexx-xxxxx/xxxxxxx.xxxpredictiveHigh
51Filexx-xxxxxxxx.xxxpredictiveHigh
52Libraryxxx/xxxxxx.xxpredictiveHigh
53Libraryxxxxxxxxx/xxx-xxxxxx/xxxxxxxx.xxxpredictiveHigh
54ArgumentxxxxxxpredictiveLow
55ArgumentxxxxxxxxpredictiveMedium
56ArgumentxxxpredictiveLow
57ArgumentxxxxpredictiveLow
58ArgumentxxxxxpredictiveLow
59ArgumentxxxxxxxxpredictiveMedium
60ArgumentxxxxxxxxxxxxpredictiveMedium
61Argumentxxxxx_xxpredictiveMedium
62ArgumentxxxxpredictiveLow
63ArgumentxxpredictiveLow
64Argumentxx_xxxxxxxxpredictiveMedium
65ArgumentxxxxpredictiveLow
66ArgumentxxxxxxpredictiveLow
67ArgumentxxxxxxpredictiveLow
68Argumentxxxxx[xxxxx][xx]predictiveHigh
69ArgumentxxxxxpredictiveLow
70ArgumentxxxxpredictiveLow
71Argumentxxxx_xxxxpredictiveMedium
72ArgumentxxxxpredictiveLow
73ArgumentxxxxxxxxpredictiveMedium
74ArgumentxxxxxxxxxpredictiveMedium
75ArgumentxxxxxxxxxxpredictiveMedium
76ArgumentxxxpredictiveLow
77ArgumentxxxpredictiveLow
78Argumentxxxx-xxxxxpredictiveMedium
79Argumentxxxx_xxxxxpredictiveMedium
80ArgumentxxxxxxxxxxxxxxxxpredictiveHigh
81Argumentxxxx->xxxxxxxpredictiveHigh
82Network Portxxx/xxx (xxxx)predictiveHigh

References (27)

The following list contains external sources which discuss the actor and the associated activities:

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!