BlankSlate Analysisinfo

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (158)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	130
pt	8
de	8
ru	8
fr	2

Country

GB: Great Britain	76
US: USA	44
DE: Germany	8
RU: Russia	8
FR: France	4

Actors

BlankSlate	4
Cerber	3
Ave Maria	1

Activities

Interest

Timeline

Type

Not Defined	70
WordPress Plugin	14
Content Management System	12
Database Software	4
Anti-Malware Software	4

Vendor

Not Defined	38
SourceCodester	22
Wondershare	6
Totolink	4
Campcodes	4

Product

WordPress	6
Zillya! Antivirus	4
phpBP	2
SQLite SQLite3	2
Autodesk AutoCAD	2

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.02820	0.30	CVE-2010-0966
2	JetBrains PhpStorm idea.log log file	3.8	3.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00044	0.02	CVE-2022-48435
3	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure	5.3	5.2	$5k-$25k	Calculating	High	Workaround	0.03828	0.00	CVE-2007-1192
4	WPForms Pro Form Submission cross site scripting	5.9	5.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00059	0.02	CVE-2023-7063
5	All in One SEO Pack Plugin cross site scripting	3.9	3.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00084	0.00	CVE-2023-0585
6	All in One SEO Pack Plugin cross site scripting	5.1	5.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00063	0.00	CVE-2023-0586
7	JetBrains IntelliJ IDEA Authentication Token information disclosure	5.2	5.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00063	0.00	CVE-2024-24941
8	PHPGurukul Online Notes Sharing System profile.php cross-site request forgery	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00071	0.12	CVE-2023-7052
9	Views for WPForms Plugin create_view cross-site request forgery	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00051	0.00	CVE-2024-0374
10	SourceCodester Responsive Ordering System Product_model.php unrestricted upload	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01993	0.00	CVE-2021-25206
11	WPForms Pro Plugin csv injection	7.6	7.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00320	0.05	CVE-2022-3574
12	Wondershare Dr.Fone permission	7.3	7.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00090	0.02	CVE-2023-29835
13	code-projects Crud Operation System add.php cross site scripting	5.6	5.4	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00066	0.20	CVE-2024-11820
14	ZZCMS ChangeTable.php unrestricted upload	7.5	7.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00063	0.04	CVE-2024-10292
15	Autodesk AutoCAD/Advance Steel/Civil 3D STP File ASMKERN228A.dll out-of-bounds write	7.0	7.0	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00045	0.04	CVE-2024-0446
16	SourceCodester Petrol Pump Management Software invoice.php sql injection	4.7	4.5	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00145	0.02	CVE-2024-10355
17	code-projects Pharmacy Management System Manage Customer Page manage_customer.php cross site scripting	3.2	3.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00066	0.09	CVE-2024-10198
18	WPForms Google Sheet Connector Plugin cross site scripting	4.8	4.7	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00072	0.00	CVE-2023-2321
19	Totolink X2000R_V2 boa formTmultiAP buffer overflow	8.6	8.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00586	0.04	CVE-2023-7208
20	SourceCodester Online Flight Booking Management System POST Parameter review_search.php sql injection	7.5	7.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00214	0.14	CVE-2023-0283

IOC - Indicator of Compromise (9)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	19.48.17.0		BlankSlate	04/01/2022	verified	Low
2	54.68.27.226	ec2-54-68-27-226.us-west-2.compute.amazonaws.com	BlankSlate	04/01/2022	verified	Low
3	XX.XX.XX.X	xxxxxxx-xxx-xxx-xxx-xxx.xx.xx.xxxx.xxxxxxxxxx.xx	Xxxxxxxxxx	04/01/2022	verified	Very Low
4	XX.XX.XXX.X	xxx.xx-xx-xx-xxx.xx	Xxxxxxxxxx	04/01/2022	verified	Low
5	XXX.XX.XXX.XX		Xxxxxxxxxx	04/01/2022	verified	Medium
6	XXX.XXX.X.XXX	xxx.x.xxx.xxx.xx.xxxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxx	04/01/2022	verified	Low
7	XXX.XXX.XXX.X	xxx.xxxx.xxx.xxxx.xxxxxxx	Xxxxxxxxxx	04/01/2022	verified	Low
8	XXX.XXX.XXX.X	xxx.xx-xxx-xxx-xxx.xx	Xxxxxxxxxx	04/01/2022	verified	Low
9	XXX.XXX.XXX.X		Xxxxxxxxxx	04/01/2022	verified	Medium

TTP - Tactics, Techniques, Procedures (16)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-22, CWE-24	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-294	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	High
5	TXXXX.XXX	CAPEC-XXX	CWE-XX, CWE-XX	Xxxxx Xxxxx Xxxx Xxxxxxxxx	predictive	High
6	TXXXX	CAPEC-XXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
7	TXXXX.XXX		CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	High
8	TXXXX	CAPEC-XXX	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
9	TXXXX	CAPEC-XX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
10	TXXXX	CAPEC-XXX	CWE-XX	Xxx Xxxxxxxxx	predictive	High
11	TXXXX	CAPEC-XXX	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
12	TXXXX.XXX	CAPEC-XXX	CWE-XXX	Xxxxxxxxx Xxxxxxxxx	predictive	High
13	TXXXX	CAPEC-XX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
14	TXXXX	CAPEC-XXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
15	TXXXX.XXX		CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
16	TXXXX.XXX	CAPEC-X	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High

IOA - Indicator of Attack (143)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/add.php	predictive	Medium
2	File	/admin/index.php	predictive	High
3	File	/admin/invoice.php	predictive	High
4	File	/admin/list_addr_fwresource_ip.php	predictive	High
5	File	/admin/makehtml_freelist_action.php	predictive	High
6	File	/admin/return_add.php	predictive	High
7	File	/admin/save.php	predictive	High
8	File	/admin/service/stop/	predictive	High
9	File	/admin/students/manage_academic.php	predictive	High
10	File	/api/v1/attack/falco	predictive	High
11	File	/application/websocket/controller/Setting.php	predictive	High
12	File	/bin/boa	predictive	Medium
13	File	/cgi-bin/cstecgi.cgi	predictive	High
14	File	/cgi-bin/discovery.cgi	predictive	High
15	File	/cgi-bin/login_action.cgi	predictive	High
16	File	/event/admin/?page=user/list	predictive	High
17	File	/include/file.php	predictive	High
18	File	/index.php	predictive	Medium
19	File	/xxxxx.xxx?xxxx=xxxxxxxx_xxx	predictive	High
20	File	/xxxxxx_xxxxxxxx.xxx	predictive	High
21	File	/xxxx/xxxxx/xxxxxx	predictive	High
22	File	/xxxxxxxxxxxxxxx	predictive	High
23	File	/xxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxx	predictive	High
24	File	/xxxxxxxx.xxx	predictive	High
25	File	/xxxxxxxx/xxxx	predictive	High
26	File	/xxxxxxx/	predictive	Medium
27	File	/xxxx/xxxxxxx.xxx	predictive	High
28	File	/xxxxxxxxxx.xxx	predictive	High
29	File	/xxx_xxxx/xxx-xxx/xxxxxxx.xxx	predictive	High
30	File	/xxxxxx/xxxxx.xxx/xxxxx/xxxxx/xxx_xxxxxx_xxxxxxxx.xxxx	predictive	High
31	File	x/xxxxx.x/xxxxxx/xxxxxxxxxxx.xxx	predictive	High
32	File	xxxxxxxxxxxx.xxx	predictive	High
33	File	xxxxx/xxx_xxxxxxxx.xxx	predictive	High
34	File	xxxxx/xxxxxxxxxx/xxxxxxx.xxx	predictive	High
35	File	xxx/xxxxxx/xxxxxx.xxx	predictive	High
36	File	xxx/xxxxx/xxxxxxxxxx/xxxx.xxx	predictive	High
37	File	xxx/xxxx/xxxxx/xxxx.xxx	predictive	High
38	File	xxxxxxx.xxx	predictive	Medium
39	File	xxxxxxx.xxx	predictive	Medium
40	File	xxxxxxx.xxx	predictive	Medium
41	File	xxxxxx-xxxxxxx.xxx	predictive	High
42	File	xxxxxxxxxx.xxx	predictive	High
43	File	xxxxxxxx_xxxxxxx.xxx	predictive	High
44	File	xxxx/xx-xxxxxxx.xxx	predictive	High
45	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
46	File	xxxxxxx.xxx	predictive	Medium
47	File	xxxxxxxxxxxx_xxxxxxx.xxx	predictive	High
48	File	xxxxxx_xxxxx_xxxxxxxx.xxx	predictive	High
49	File	xxxxxxx/xxxx-xxxxx-xxxxxx.xxx	predictive	High
50	File	xxxxxxx/xxxx-xxxxx-xxxxxx.xxx?xxxxxx=x	predictive	High
51	File	xxxx.xxx	predictive	Medium
52	File	xxx/xxxxxxx/xxxxxxxxxxxxxx.x	predictive	High
53	File	xxxxxxxx/xxxxx.xxx	predictive	High
54	File	xxxx.xxx	predictive	Medium
55	File	xxx/xxxxxx.xxx	predictive	High
56	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	High
57	File	xxxxx.xxx	predictive	Medium
58	File	xx/xxxxxxx.x	predictive	Medium
59	File	xxxxx/xxxx.xxx	predictive	High
60	File	xxxx_xxxx_xxxxxx.xxx	predictive	High
61	File	xxx.x/xxxxxx.x	predictive	High
62	File	xxxxxx/xxx/xxxxxxxxxxx/xxxx_xxxxxxxxxx.xx	predictive	High
63	File	xxxxxxxxxx.xxx	predictive	High
64	File	xxxxxxxxx.xxx	predictive	High
65	File	xxxxxx_xxxxxx_xxxxxx.xxx	predictive	High
66	File	xxxxxxxxxxx_xxxxx_xxxxxxxx.xxx	predictive	High
67	File	xxxxxxxxx.xxx	predictive	High
68	File	xxxxx_xxxxx_xxx.xxx	predictive	High
69	File	xxxxxxx.xxx	predictive	Medium
70	File	xxxxxxx/xxxxxx-xxxxxxx-xxxx-xxxx.xxxx	predictive	High
71	File	xxxxxxx_xxxxx.xxx	predictive	High
72	File	xxxxxxxx.xxx	predictive	Medium
73	File	xxxxxxxx_xxxxx_xxxxxxxx.xxx	predictive	High
74	File	xxxxxxxxx/xxxx/xxxxxxxxx.xxx	predictive	High
75	File	xxxx/xxxx/	predictive	Medium
76	File	xxxxxx_xxxxxx.xxx	predictive	High
77	File	xxxxxxxxx	predictive	Medium
78	File	xxxx/xxxxx_xxxxxx.xxx	predictive	High
79	File	xxxxxx.xxx	predictive	Medium
80	File	xxxxxx_xxxxxxx.xxx	predictive	High
81	File	xxxxx_xxxx.xxx	predictive	High
82	File	xxx/xxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
83	File	xxxxxx_xxx_xxxxx_xxx.xxx	predictive	High
84	File	xxxxxxxx/xxxxx/xxx_xxx.xxx	predictive	High
85	File	xxxx_x_xxxx.xxx	predictive	High
86	File	xxxxx/xxxx_xxxx.xxx	predictive	High
87	Library	xxxxxxxxxxx.xxx	predictive	High
88	Library	xxxxxx.xxx	predictive	Medium
89	Library	xxx.xxx	predictive	Low
90	Argument	$xxxx["xx"]	predictive	Medium
91	Argument	$_xxxxxx['xxx_xxxx']	predictive	High
92	Argument	$_xxxxxx['xxxxxx_xxxx']	predictive	High
93	Argument	xxxxxx	predictive	Low
94	Argument	xxxxxx	predictive	Low
95	Argument	xxxxxxxx	predictive	Medium
96	Argument	xxxxxxx	predictive	Low
97	Argument	xxxxxxxxxxxxxx	predictive	High
98	Argument	x_xxxxxx	predictive	Medium
99	Argument	xxxxxxxxxxx	predictive	Medium
100	Argument	xxx_xxxx	predictive	Medium
101	Argument	xxxxxxxx	predictive	Medium
102	Argument	xxxxxx	predictive	Low
103	Argument	xxxxxxxxxxxx	predictive	Medium
104	Argument	xxxxx	predictive	Low
105	Argument	xxxxx/xxxxxxx/xxx/xx	predictive	High
106	Argument	xxxxx_xxxxxxx	predictive	High
107	Argument	xxxxx	predictive	Low
108	Argument	xxxx	predictive	Low
109	Argument	xxxxx xxxx/xxxx xxxx	predictive	High
110	Argument	xxxxx	predictive	Low
111	Argument	xxxx_xxxx	predictive	Medium
112	Argument	xx	predictive	Low
113	Argument	xxxxx_xxxx	predictive	Medium
114	Argument	xxx_xxx_xxxxx	predictive	High
115	Argument	xxxxxx	predictive	Low
116	Argument	xxxx	predictive	Low
117	Argument	xxxx	predictive	Low
118	Argument	xxxxxxxx	predictive	Medium
119	Argument	xxx_xxxxx_xx	predictive	Medium
120	Argument	xxxxxxxxxx/xxxx/xxxxxxxx/xxxx/xxxxxxx_xxxx	predictive	High
121	Argument	xxxxxxxx	predictive	Medium
122	Argument	xxxxxxxx	predictive	Medium
123	Argument	xxxx_xxxx	predictive	Medium
124	Argument	xxxxxxx	predictive	Low
125	Argument	xxxxxxx	predictive	Low
126	Argument	xxxxxxxx	predictive	Medium
127	Argument	xxx	predictive	Low
128	Argument	xxxxxxxx	predictive	Medium
129	Argument	xxxxxxxxxxxx	predictive	Medium
130	Argument	xxxxxxx	predictive	Low
131	Argument	xxxxxxx	predictive	Low
132	Argument	xxxxxxxxx_xxxx/xxxxxxx	predictive	High
133	Argument	xxxxxxxxx	predictive	Medium
134	Argument	xxxx_xxxx	predictive	Medium
135	Argument	x_xxxx/x_xxxx	predictive	High
136	Argument	xxx	predictive	Low
137	Argument	xxxx	predictive	Low
138	Argument	xxxxxxxx	predictive	Medium
139	Argument	xxxxxxxx/xxxxxxxx	predictive	High
140	Input Value	(xxxxxxxxx(xxxx,xxxxxx(xxxx,xxxxxxxxxxxx,(xxxxxx (xxx(xxxx=xxxx,x))),xxxxxxxxxxxx),xxxx))	predictive	High
141	Input Value	<xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	High
142	Input Value	xxxxxxx%xxxxxxxxx.xxx'%xx%xx<xxxxxx%xx>xxxxx(xxxx)</xxxxxx>	predictive	High
143	Network Port	xxx/xx (xxx)	predictive	Medium

References (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

This view requires CTI permissions

Just purchase a CTI license today!