Brunhilda Analysis

IOB - Indicator of Behavior (24)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en22
de2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Thomas R. Pasawicz HyperBook Guestbook2
Microsoft Windows2
Microsoft Edge2
HP HP-UX2
IBM Kenexa LCMS Premier on Cloud2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemEPSSCTICVE
1VICIdial vicidial.php cross site scripting4.84.8$0-$5k$0-$5kNot DefinedNot Defined0.000750.04CVE-2021-35377
2hughsk flat index.js unflatten prototype pollution6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.006090.17CVE-2020-36632
3OpenWrt NAT Rules Name Screen cross site scripting3.53.5$0-$5k$0-$5kNot DefinedNot Defined0.000580.00CVE-2021-45906
4tinc VPN net_packet.c receive_tcppacket memory corruption6.36.0$0-$5k$0-$5kHighOfficial Fix0.054680.04CVE-2013-1428
5Joomla CMS File Upload media.php input validation6.36.0$5k-$25k$0-$5kHighOfficial Fix0.798640.05CVE-2013-5576
6Microsoft .NET Framework Array Copy memory corruption7.37.0$5k-$25k$0-$5kNot DefinedOfficial Fix0.240980.04CVE-2015-2504
7Bottle Privilege Escalation5.55.3$0-$5k$0-$5kNot DefinedOfficial Fix0.006900.04CVE-2022-31799
8Solar appScreener License server-side request forgery5.55.3$0-$5k$0-$5kNot DefinedNot Defined0.002210.05CVE-2022-24449
9Caddy X.509 Certificate information disclosure4.54.5$0-$5k$0-$5kNot DefinedOfficial Fix0.001380.00CVE-2018-19148
10Drupal Phar Stream Wrapper input validation8.58.4$0-$5k$0-$5kNot DefinedOfficial Fix0.920930.02CVE-2019-6339
11Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25kCalculatingHighWorkaround0.020160.00CVE-2007-1192
12Microsoft Windows PowerShell code injection6.35.7$25k-$100k$0-$5kProof-of-ConceptUnavailable0.000000.00
13HP HP-UX FTP Server privileges management7.57.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.000000.06
14Microsoft Windows VHD Driver File access control6.15.8$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.000460.04CVE-2016-7224
15Microsoft Edge access control3.13.0$25k-$100k$0-$5kNot DefinedOfficial Fix0.069760.00CVE-2016-3274
16NASM Netwide Assembler preproc.c tokenize memory corruption6.36.2$0-$5k$0-$5kNot DefinedOfficial Fix0.000590.00CVE-2018-8881
17windows-selenium-chromedriver Download cryptographic issues6.86.8$0-$5k$0-$5kNot DefinedNot Defined0.001730.00CVE-2016-10687
18QEMU NVM Express Controller Emulator out-of-bounds6.76.6$0-$5k$0-$5kNot DefinedOfficial Fix0.000620.02CVE-2018-16847
19HP Color LaserJet Pro M280-M281 Multifunction Printer Embedded Web Server Reflected cross site scripting5.25.2$5k-$25k$5k-$25kNot DefinedNot Defined0.000580.06CVE-2019-6323
20Microsoft Windows Physical Installation access control6.46.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.002620.00CVE-2018-8592

IOC - Indicator of Compromise (13)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (6)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (6)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/agc/vicidial.phppredictiveHigh
2Fileadministrator/components/com_media/helpers/media.phppredictiveHigh
3Filexxx/xxxxxxx.xpredictiveHigh
4Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
5Filexxxxx.xxpredictiveMedium
6Filexxx_xxxxxx.xpredictiveMedium

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Might our Artificial Intelligence support you?

Check our Alexa App!