Commando Cat Analysisinfo

IOB - Indicator of Behavior (472)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Language

en366
ru40
pt36
de12
zh6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

mooSocial mooDating10
Apple macOS8
Google Chrome6
itsourcecode Online Discussion Forum4
Samba4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

These are the vulnerabilities that we have identified as researched, approached, or attacked.

#VulnerabilityBaseTemp0dayTodayExpCouKEVEPSSCTICVE
1Safe Exam Browser Clipboard Management information disclosure5.75.7$0-$5k$0-$5kNot definedOfficial fix 0.000870.07CVE-2024-37742
2LogicBoard CMS away.php redirect6.36.1$0-$5k$0-$5kNot definedUnavailable 0.000001.70
3Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_base_config.php os command injection7.57.2$0-$5k$0-$5kProof-of-ConceptWorkaroundexpected0.912160.21CVE-2024-7120
4Netgear WN604 Web Interface downloadFile.php information disclosure5.35.1$5k-$25k$0-$5kProof-of-ConceptWorkaroundexpected0.915540.32CVE-2024-6646
5Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload7.57.3$0-$5k$0-$5kProof-of-ConceptNot definedexpected0.803420.00CVE-2024-0939
6TVT DVR TD-2104TS-CL queryDevInfo information disclosure5.35.1$0-$5k$0-$5kProof-of-ConceptWorkaroundexpected0.812850.00CVE-2024-7339
7osCommerce all-products cross site scripting4.33.9$0-$5k$0-$5kProof-of-ConceptNot defined 0.057300.08CVE-2024-4348
8D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection8.18.1$5k-$25k$0-$5kHighWorkaroundverified0.943830.07CVE-2024-3273
9mooSocial mooDating URL users cross site scripting4.44.3$0-$5k$0-$5kProof-of-ConceptNot defined 0.070440.07CVE-2023-3847
10Dahua Smart Park Management devicePoint_addImgIco unrestricted upload7.57.3$0-$5k$0-$5kProof-of-ConceptNot definedexpected0.914860.07CVE-2023-3836
11PHP Jabbers Bus Reservation System index.php cross site scripting4.94.8$0-$5k$0-$5kProof-of-ConceptNot defined 0.057480.09CVE-2023-4111
12PHP Jabbers Taxi Booking index.php cross site scripting4.94.8$0-$5k$0-$5kProof-of-ConceptNot defined 0.062580.00CVE-2023-4116
13DedeCMS select_templets.php path traversal4.64.5$0-$5k$0-$5kProof-of-ConceptNot defined 0.027620.11CVE-2023-2059
14PHP Jabbers Availability Booking Calendar index.php cross site scripting4.44.3$0-$5k$0-$5kProof-of-ConceptNot defined 0.066080.00CVE-2023-4110
15Ellucian Ethos Identity logout cross site scripting4.94.8$0-$5k$0-$5kProof-of-ConceptOfficial fixpossible0.770480.06CVE-2023-2822
16PlayTube Redirect information disclosure5.45.2$0-$5k$0-$5kProof-of-ConceptNot definedexpected0.914970.00CVE-2023-4714
17ColumbiaSoft Document Locator WebTools login improper authentication8.18.0$0-$5k$0-$5kNot definedOfficial fixexpected0.820140.07CVE-2023-5830
18Academy LMS GET Parameter filter sql injection7.57.3$0-$5k$0-$5kProof-of-ConceptNot definedpossible0.432310.07CVE-2023-4974
19mooSocial mooDating URL question cross site scripting4.44.3$0-$5k$0-$5kProof-of-ConceptNot defined 0.070440.11CVE-2023-3843
20mooSocial mooDating URL ajax_invite cross site scripting4.44.3$0-$5k$0-$5kProof-of-ConceptNot defined 0.070440.00CVE-2023-3845

IOC - Indicator of Compromise (3)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsIdentifiedTypeConfidence
145.9.148.193Commando Cat03/20/2024verifiedHigh
2XX.XXX.XXX.XXXxxxxxxx Xxx06/10/2024verifiedVery High
3XXX.XXX.XX.XXXxxx-xxx-xx-xxx.xxxxxxx.xxxxxxxxxxx.xxxXxxxxxxx Xxx03/20/2024verifiedHigh

TTP - Tactics, Techniques, Procedures (23)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueClassVulnerabilitiesAccess VectorTypeConfidence
1T1006CAPEC-126CWE-22, CWE-24, CWE-27, CWE-28, CWE-425Path TraversalpredictiveHigh
2T1055CAPEC-10CWE-74Improper Neutralization of Data within XPath ExpressionspredictiveHigh
3T1059CAPEC-242CWE-94Argument InjectionpredictiveHigh
4T1059.007CAPEC-209CWE-79, CWE-80Basic Cross Site ScriptingpredictiveHigh
5T1068CAPEC-122CWE-264, CWE-269, CWE-284Execution with Unnecessary PrivilegespredictiveHigh
6TXXXX.XXXCWE-XXXXxx Xx Xxxx-xxxxx XxxxxxxxpredictiveHigh
7TXXXXCAPEC-XXXCWE-XXXXxxx Xxx Xxxxxxxxx Xxxxxxxxxxx XxxxxxxxpredictiveHigh
8TXXXX.XXXCAPEC-XXXCWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveHigh
9TXXXXCAPEC-XXXCWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveHigh
10TXXXX.XXXCAPEC-XXXCWE-XXXXxxx XxxxxxxxpredictiveHigh
11TXXXXCWE-XXX7xx Xxxxxxxx XxxxxxxxpredictiveHigh
12TXXXXCAPEC-XCWE-XXX, CWE-XXXXxxxxxxxxx XxxxxxpredictiveHigh
13TXXXXCAPEC-XXXCWE-XXXxx XxxxxxxxxpredictiveHigh
14TXXXX.XXXCAPEC-XCWE-XXXXxxxxxxx XxxxxxxxxxxxxpredictiveHigh
15TXXXXCAPEC-XXXCWE-XXX, CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxxx XxxxxxxxxxpredictiveHigh
16TXXXXCAPEC-XXCWE-XXXXxxxxxxxx Xxxxxxx Xx Xxxxxxxxx XxxxxxxxxxxpredictiveHigh
17TXXXXCAPEC-XXCWE-XXXXxxxxxxxx Xxxxxx XxxxpredictiveHigh
18TXXXX.XXXCAPEC-XXXCWE-XXXXxxxxxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHigh
19TXXXX.XXXCAPEC-XXXCWE-XXXXxxxxxxxpredictiveHigh
20TXXXXCAPEC-XXXCWE-XXX, CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHigh
21TXXXXCAPEC-XXCWE-XXX, CWE-XXXXxxxxxxxxxxxx XxxxxxpredictiveHigh
22TXXXX.XXXCAPEC-XXCWE-XXX, CWE-XXXXxx Xxxxxxxxxx XxxxxpredictiveHigh
23TXXXX.XXXCAPEC-XCWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveHigh

IOA - Indicator of Attack (227)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/academy/tutor/filterpredictiveHigh
2File/ad-listpredictiveMedium
3File/admin/suppliers/view_details.phppredictiveHigh
4File/ajax.php?action=read_msgpredictiveHigh
5File/api/authentication/loginpredictiveHigh
6File/api/sys/loginpredictiveHigh
7File/api/sys/set_passwdpredictiveHigh
8File/api/v2/open/rowsInfopredictiveHigh
9File/app/sys1.phppredictiveHigh
10File/assets/components/gallery/connector.phppredictiveHigh
11File/backend/admin/his_admin_register_patient.phppredictiveHigh
12File/building/backmgr/urlpage/mobileurl/configfile/jx2_config.inipredictiveHigh
13File/cas/logoutpredictiveMedium
14File/catalog/all-productspredictiveHigh
15File/cgi-bin/adm.cgipredictiveHigh
16File/cgi-bin/mesh.cgi?page=upgradepredictiveHigh
17File/cgi-bin/nas_sharing.cgipredictiveHigh
18File/cgi-bin/nightled.cgipredictiveHigh
19File/cgi-bin/touchlist_sync.cgipredictiveHigh
20File/cgi-bin/vitogate.cgipredictiveHigh
21File/debug/pprofpredictiveMedium
22File/desktop_app/file.ajax.php?action=uploadfilepredictiveHigh
23File/downloadFile.phppredictiveHigh
24File/emap/devicePoint_addImgIco?hasSubsystem=truepredictiveHigh
25File/envpredictiveLow
26File/find-a-matchpredictiveHigh
27File/xxxxx/xxxx.xxxpredictiveHigh
28File/xxxxxxxpredictiveMedium
29File/xxxxxxx/xxxx_xxxxxxpredictiveHigh
30File/xxxxxx/xxxxxxxxxxxxxxxxxpredictiveHigh
31File/xxxxxx/xxxxxxxxxxxxxxxxxpredictiveHigh
32File/xxxxxxxxxpredictiveMedium
33File/xxx/xxxxxx/xxxxxxxxx/xxxxxxxxx.xxxpredictiveHigh
34File/xxxxx.xxxpredictiveMedium
35File/xxxxx.xxx?xxxx=xxxxxxxx_xxxpredictiveHigh
36File/xxxxxx/xxxxxxx.xxxpredictiveHigh
37File/xxxxxxxxxxxx/xxxxxxxxpredictiveHigh
38File/xxxxxxx/xxxxxx.xxxpredictiveHigh
39File/xxxxxxxxxxx/xxxxxxx.xxxpredictiveHigh
40File/xxxxxpredictiveLow
41File/xxx/xxxx.xxxpredictiveHigh
42File/xxxxxxxx/xxxxx.xxxpredictiveHigh
43File/xxxxxxxxxxxxpredictiveHigh
44File/xxxxxxpredictiveLow
45File/xxxxxx/xxxxxpredictiveHigh
46File/xxxxxx_x_xxxxxx/xxxxxxx/xxxxxx/xxxx_xxxxxxx/xxxx/xxxx_xxxx.xpredictiveHigh
47File/xxx/xxxxxxxxxx/xxxxxxxxxx.xxxxpredictiveHigh
48File/xxxx/xxxxxxxxxx.xxxpredictiveHigh
49File/xxxxxxx/xxxxxxx/xxxxx?xx{}predictiveHigh
50File/xxxxxpredictiveLow
51File/xxxxx/xxxxxxxxxxxx.xxxpredictiveHigh
52File/xxxxx/xxxxpredictiveMedium
53Filexxxxxxx.xxxpredictiveMedium
54Filexxx-xxxxxx-xxxx.xxxpredictiveHigh
55Filexxxxx/xxxxxxxxxx_xxxxxxxx.xxxpredictiveHigh
56Filexxxxx/xxxxx-xxx-xxxxx-xxxxx.xxxpredictiveHigh
57Filexxxxx/xxxxxxx/xxxxxxxxxxxxpredictiveHigh
58Filexxxxxxxxxxxx/xxxxx/xxxx/predictiveHigh
59Filexxxxx.xxxpredictiveMedium
60Filexxx_xx_xxx_xxx.xxxpredictiveHigh
61Filexxx/xxxxxx/xxxx/xxx_xxxxxx.xxxpredictiveHigh
62Filexxxxxxx.xxxpredictiveMedium
63Filexxxxxx.xxxpredictiveMedium
64Filexxx.xpredictiveLow
65Filexxxxxxxx.xxxpredictiveMedium
66Filexxxxxxxx.xxxxxxxxxxxxxxxxx.xxxpredictiveHigh
67Filexxx-xxx/predictiveMedium
68Filexxxxxxxxxxx.xxxpredictiveHigh
69FilexxxpredictiveLow
70Filexxx/xxxxxxxx/xxxx/xxxxxxxx.xxpredictiveHigh
71Filexxxxxx.xpredictiveMedium
72Filexxxx/xxxxxxxx.xxxx.xxxxxxx.xxxpredictiveHigh
73Filexxxxxxxxx.xxxpredictiveHigh
74Filexxxxxxx/xxx/xxx-xx.xpredictiveHigh
75Filexxxxxxxx.xxpredictiveMedium
76Filexxx_xxxx.xpredictiveMedium
77Filexxxxx.xxxpredictiveMedium
78Filexxx/xxxxx.xxxxxpredictiveHigh
79Filexxxx/xxxxxxxx/xxx&xx=xxxxxxxpredictiveHigh
80Filexxxxxx.xxxpredictiveMedium
81Filexxxx_xxx.xxxpredictiveMedium
82Filexxxxxxxxxxxxxxxxxxxxxxxxx.xxpredictiveHigh
83Filexxxxxxx_xxx.xxxxpredictiveHigh
84Filexxxxxx.xxxpredictiveMedium
85Filexxx/xxxxxx.xxxpredictiveHigh
86Filexxxxxxx/xxxxx.xxx.xxxpredictiveHigh
87Filexxxxx.xxxpredictiveMedium
88Filexxxxx.xxxpredictiveMedium
89Filexx_xxxxx.xpredictiveMedium
90Filexxxxx_xxxxx.xpredictiveHigh
91Filexxxxxxxx/xxxxxxxxxpredictiveHigh
92Filexxxxxx/xxx/xxxxxxxx.xpredictiveHigh
93Filexxxxxx/xxxx_xxxxxxxxx.xpredictiveHigh
94Filexxxxxxx.xxxpredictiveMedium
95Filexxxx.xxxpredictiveMedium
96Filexxxxx.xxxpredictiveMedium
97Filexxxx_xxxx_xxxxxx.xxxpredictiveHigh
98Filexxxxxx_xxxxxxxx.xxxpredictiveHigh
99Filexxxxxxxx.xxxpredictiveMedium
100Filexxxxxxx/xxxxx/xxxxx.xpredictiveHigh
101Filexxxxxxx/xxxxx/xxx/xxx.xpredictiveHigh
102Filexxxxxxx/xxxxxx/xxxxxx/xxxxxxxxx.xxx#xxxpredictiveHigh
103Filexx.xxxpredictiveLow
104Filexxxx_xxxxxx.xxxpredictiveHigh
105Filexxxxxxxxxxx-xxxx.xxpredictiveHigh
106Filexxx/xxxxx.xxxxpredictiveHigh
107Filexxxxx_xxxxx.xxxpredictiveHigh
108Filexxxxxxx/xxxxxxx/xxx/xxxxxxxxxxxxxpredictiveHigh
109Filexxxxxxxxx/xxxxx.xxxxxpredictiveHigh
110Filexxxxx/xxxxx.xxxxxpredictiveHigh
111Filexxxxxxx_xxxxxxx.xxxpredictiveHigh
112Filexxxxxxx_xxxxxxx_xxxx.xxxpredictiveHigh
113Filexxxxxxxxxx.xxxpredictiveHigh
114Filexxxxxxx.xpredictiveMedium
115Filexxxxxxxxxxxxx.xxxpredictiveHigh
116Filexxxxxx-xxxxxxx.xxxpredictiveHigh
117Filexxxxxx-xxxxxx.xxxpredictiveHigh
118Filexxxxxxxxx.xxxpredictiveHigh
119Filexxxxxx/xxxxxxxxxxx/xxx/xxxxxxxxxx/xxxx.xxxpredictiveHigh
120Filexxxxxxxx.xxx/xxxxxx.xxx/xxxxxxxx.xxxpredictiveHigh
121Filexxx/xxxx/xxxx/xxx/xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxx.xxxxpredictiveHigh
122Filexxx/xxxx.xpredictiveMedium
123Filexxx.xpredictiveLow
124FilexxxxxxxxxxxxxxxxpredictiveHigh
125Filexxxxxxxx.xxxpredictiveMedium
126Filexxx-xxxxxxx-xxx.xxpredictiveHigh
127Filexxxxxxx/xxxxxxx/xxxxxx/xxxxxx_xxxxxxxx.xxxpredictiveHigh
128Filexxxxxxx.xpredictiveMedium
129Filexxx.xxxpredictiveLow
130Filexxxxxx.xxx/xxxxxx.xxxpredictiveHigh
131Filexx-xxxxx-xxxxxx.xxxpredictiveHigh
132Filexxxx.xxpredictiveLow
133File\xxxxxxxxxx\xxxxxxxxx\xxx\xxxxxx.xxpredictiveHigh
134File~/xxxxxxxx/xxxxx-xxx-xxxxxx-xxxxxxxxxxxx.xxxpredictiveHigh
135Libraryxxxxx_xx.xxxpredictiveMedium
136Libraryxxxxxxxx/xxxxxxxxxxx.xxxpredictiveHigh
137Libraryxx.xxxxxxxxxx.xxxxxxxxxxxxxxx.xxxpredictiveHigh
138Libraryxx_xxxxxxx_xxxxpredictiveHigh
139Libraryxxx/xxxxxxxxx/xxxxxxxx.xxxxx.xxxpredictiveHigh
140Libraryxxxxxxxxxxxxxx.xxpredictiveHigh
141Libraryxxxxxxxx.xxxpredictiveMedium
142Libraryxxxxxxx.xxxpredictiveMedium
143Libraryxxxxx.xxxpredictiveMedium
144Libraryxxxxxxxxxxxxx.xxx)predictiveHigh
145ArgumentxxxxxxpredictiveLow
146ArgumentxxxxxxpredictiveLow
147ArgumentxxxpredictiveLow
148ArgumentxxxxxxxxxxxpredictiveMedium
149Argumentxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxpredictiveHigh
150ArgumentxxxxxxpredictiveLow
151ArgumentxxxxxxxxpredictiveMedium
152Argumentx:\xxxxxxx\xpredictiveMedium
153Argumentxxxxx_xxxxpredictiveMedium
154ArgumentxxxpredictiveLow
155ArgumentxxxpredictiveLow
156ArgumentxxxxxxxpredictiveLow
157ArgumentxxxxxxxpredictiveLow
158Argumentxxxxx_xxpredictiveMedium
159ArgumentxxxxxxxpredictiveLow
160ArgumentxxxxxxxxpredictiveMedium
161ArgumentxxxxxxxxxxxxxxxxxpredictiveHigh
162Argumentxx_xxxx_xxxxpredictiveMedium
163Argumentxxx_xxxpredictiveLow
164ArgumentxxxpredictiveLow
165ArgumentxxxxpredictiveLow
166ArgumentxxxxpredictiveLow
167ArgumentxxxxxxxxpredictiveMedium
168Argumentxxxx_xxxxxpredictiveMedium
169Argumentxxxx_xxxxxxpredictiveMedium
170Argumentxxxxxx[xxxxxxx]/xxxxxx[xxxxx]predictiveHigh
171Argumentxxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxpredictiveHigh
172Argumentx_xxxxpredictiveLow
173Argumentxxxxxx_xxxpredictiveMedium
174ArgumentxxxxpredictiveLow
175ArgumentxxpredictiveLow
176ArgumentxxpredictiveLow
177ArgumentxxxxxpredictiveLow
178ArgumentxxxxxpredictiveLow
179Argumentxxxxx/xxxxxx_xxpredictiveHigh
180ArgumentxxxxxxxpredictiveLow
181ArgumentxxpredictiveLow
182ArgumentxxxxxxpredictiveLow
183Argumentxxxxxxxx[xx]predictiveMedium
184ArgumentxxxpredictiveLow
185ArgumentxxxxpredictiveLow
186ArgumentxxxxpredictiveLow
187Argumentxxx_xxxxx/xxx_xxxxxxx/xxx_xxxxx/xxx_xxx/xxx_xxx/xxx_xxxxxx/xxx_xxxxx/xxx_xxxx/xxx_xxxxpredictiveHigh
188ArgumentxxxxxxpredictiveLow
189Argumentxxxxx_xxx/xxxxx_xxxpredictiveHigh
190ArgumentxxxxxpredictiveLow
191ArgumentxxxxxxxpredictiveLow
192Argumentxxxxxxxx_xxpredictiveMedium
193Argumentx_xxxxpredictiveLow
194ArgumentxxxxxxxxxxxxxpredictiveHigh
195Argumentxxxxxxxxxxx/xxxxpredictiveHigh
196Argumentxxxxxx/xxxxxx_xxxxxxpredictiveHigh
197ArgumentxxxxxxxxxxpredictiveMedium
198ArgumentxxxxxxxxxxxpredictiveMedium
199ArgumentxxxxxxpredictiveLow
200Argumentxxxxxxx_xxpredictiveMedium
201ArgumentxxxpredictiveLow
202ArgumentxxxxxxxxxpredictiveMedium
203Argumentxxxx_xxxxxxpredictiveMedium
204ArgumentxxxxxpredictiveLow
205Argumentxxxxx_xxxxpredictiveMedium
206Argumentxxxxxxxx_xxxxxxxxpredictiveHigh
207ArgumentxxxxxxpredictiveLow
208Argumentxxxxx_xxxxpredictiveMedium
209ArgumentxxxxxxxxpredictiveMedium
210ArgumentxxxxxxxxxxxpredictiveMedium
211ArgumentxxpredictiveLow
212ArgumentxxxpredictiveLow
213ArgumentxxxxxxpredictiveLow
214ArgumentxxxpredictiveLow
215ArgumentxxxpredictiveLow
216ArgumentxxxxxxpredictiveLow
217ArgumentxxxxxxxxpredictiveMedium
218ArgumentxxxxpredictiveLow
219Argumentx-xxxxxxxxx-xxxxpredictiveHigh
220Argument\xxx\predictiveLow
221Input Value"><xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>predictiveHigh
222Input Value/../../../../../../../../../xxxxxxx/xxx.xxxpredictiveHigh
223Input Value//xxx//xxxxxxx.xxxpredictiveHigh
224Input ValuexxxxxxxxpredictiveMedium
225Input ValuexxxxxxpredictiveLow
226Input ValuexxpredictiveLow
227Input Valuexxxxxxx -xxxpredictiveMedium

References (3)

The following list contains external sources which discuss the actor and the associated activities:

This view requires CTI permissions

Just purchase a CTI license today!