Cuba Ransomware Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	916
de	26
zh	18
es	12
sv	10

Country

vn	926
lu	26
cn	14
us	8
es	2

Actors

Mirai	10
Cuba Ransomware	9
Indexsinas	6
Cobalt Strike	3
ShadowPad	2

Activities

Interest

Timeline

Type

Not Defined	330
Operating System	42
WordPress Plugin	40
Content Management System	30
Router Operating System	24

Vendor

Not Defined	232
Microsoft	44
Apache	22
Oracle	20
Linux	18

Product

Linux Kernel	18
Microsoft Windows	14
Apache Tomcat	10
phpMyAdmin	8
Microsoft IIS	8

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	CTI	EPSS	CVE
1	TRENDnet TEW-800MB POST Request os command injection	7.2	6.8	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	0.00073	CVE-2024-0918
2	LogicBoard CMS away.php redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	4.12	0.00000
3	TRENDnet TEW-822DRE POST Request admin_ping.htm command injection	7.2	6.8	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.06	0.00058	CVE-2024-0920
4	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	1.94	0.00943	CVE-2010-0966
5	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.24	0.00241	CVE-2020-12440
6	D-Link DIR-600M C1 Telnet Service buffer overflow	7.5	7.0	$5k-$25k	$0-$5k	Proof-of-Concept	Workaround	0.00	0.00045	CVE-2024-1786
7	TRENDnet TEW-824DRU sub_420AE0 command injection	8.8	8.4	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.02	0.00042	CVE-2024-22545
8	TRENDnet TEW-815DAP POST Request do_setNTP command injection	8.3	8.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	0.00058	CVE-2024-0919
9	Rocket.Chat Custom Emoji listEmojiCustom sql injection	5.8	5.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	0.00054	CVE-2023-28359
10	Red Hat Linux pam_xauth privileges management	8.4	7.6	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.03	0.00043	CVE-2002-1160
11	Likeshop HTTP POST Request File.php userFormImage unrestricted upload	8.1	7.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.18	0.00727	CVE-2024-0352
12	Tiki Admin Password tiki-login.php improper authentication	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	5.33	0.00936	CVE-2020-15906
13	Jenkins Command Line Interface information disclosure	5.5	5.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.94455	CVE-2024-23897
14	TikiWiki tiki-register.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	9.27	0.01009	CVE-2006-6168
15	Synacor Zimbra Collaboration sfdc_preauth.jsp Privilege Escalation	7.6	7.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	0.00134	CVE-2023-29382
16	Python Software Foundation BaseHTTPServer HTTP Request denial of service	7.5	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Workaround	0.04	0.00000
17	Microsoft Windows Kerberos authentication spoofing	8.9	8.1	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.03	0.00048	CVE-2024-20674
18	Zoom Desktop Client access control	8.1	8.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.06	0.00043	CVE-2023-49647
19	Bitcoin wallet.dat AES Encryption Padding missing encryption	7.1	6.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.06	0.00000
20	Likeshop updateWechatInfo server-side request forgery	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.00043	CVE-2024-24028

IOC - Indicator of Compromise (75)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	10.13.102.1		Cuba Ransomware	12/03/2022	verified	High
2	10.13.102.58		Cuba Ransomware	12/03/2022	verified	High
3	10.14.100.20		Cuba Ransomware	12/03/2022	verified	High
4	10.133.78.41		Cuba Ransomware	12/03/2022	verified	High
5	23.160.193.145	server1.wlook.com	Cuba Ransomware	10/11/2023	verified	High
6	23.227.198.246	23-227-198-246.static.hvvc.us	Cuba Ransomware	12/03/2022	verified	High
7	31.44.184.84		Cuba Ransomware	01/05/2023	verified	High
8	31.44.184.100		Cuba Ransomware	01/05/2023	verified	High
9	31.184.192.44		Cuba Ransomware	12/03/2022	verified	High
10	31.184.194.42		Cuba Ransomware	01/05/2023	verified	High
11	31.184.198.74		Cuba Ransomware	01/05/2023	verified	High
12	31.184.198.80	directingme.com	Cuba Ransomware	01/05/2023	verified	High
13	31.184.198.82	harms.directingme.com	Cuba Ransomware	01/05/2023	verified	High
14	31.184.198.83		Cuba Ransomware	01/05/2023	verified	High
15	31.184.198.84		Cuba Ransomware	01/05/2023	verified	High
16	XX.XXX.XXX.XX	xxxx.xxxxxxx.xxx	Xxxx Xxxxxxxxxx	01/05/2023	verified	High
17	XX.XXX.XXX.XX		Xxxx Xxxxxxxxxx	01/05/2023	verified	High
18	XX.XXX.XXX.XX		Xxxx Xxxxxxxxxx	01/05/2023	verified	High
19	XX.XXX.XXX.XXX		Xxxx Xxxxxxxxxx	01/05/2023	verified	High
20	XX.XXX.XXX.XX	xxxxxxx.xx	Xxxx Xxxxxxxxxx	01/05/2023	verified	High
21	XX.XX.XXX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
22	XX.XXX.XXX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
23	XX.XXX.XXX.XXX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
24	XX.XXX.XXX.XXX	xxxx-xxxxx.xxxxx.xxx	Xxxx Xxxxxxxxxx	10/11/2023	verified	High
25	XX.XX.XXX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
26	XX.XX.XXX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
27	XX.XX.XX.XXX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
28	XX.XXX.XX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
29	XX.XX.XXX.XXX	xxxxxxxxxx.xx-xxxx.xx	Xxxx Xxxxxxxxxx	01/05/2023	verified	High
30	XX.XXX.XX.XXX		Xxxx Xxxxxxxxxx	01/05/2023	verified	High
31	XX.XX.XXX.XXX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
32	XX.XXX.XX.XX	xxxxxxxx-xx-xxxxxxxxxx.xxxxxxxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
33	XX.XX.XXX.XXX	xxxxxxxx.xxx	Xxxx Xxxxxxxxxx	01/05/2023	verified	High
34	XX.XXX.XXX.XXX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
35	XX.XX.XX.XXX	xxx-xx-xx-xx-xxx.xxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
36	XX.XX.XX.XX	xxx.xxxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
37	XX.XXX.XXX.XX	xxx-xxxxxxxx.xxx.xxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
38	XX.XXX.XXX.XXX	xxx.xxxxxxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
39	XX.XXX.X.XX	xxx-xxx.xxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
40	XXX.XX.XXX.XXX	xxxxxxx.xxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
41	XXX.XXX.XXX.XXX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
42	XXX.XXX.X.XXX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
43	XXX.XXX.XXX.XX	xxx.xxx.xxx.xx.xxxxxxxxxxxxxxxx.xxx	Xxxx Xxxxxxxxxx	01/05/2023	verified	High
44	XXX.XXX.XX.XXX	xxxxxxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
45	XXX.XXX.XX.XXX	xxxxxxxx.xxxxx.xx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
46	XXX.XX.X.XX	xxxxx.xxxxx.xxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
47	XXX.XX.X.XX	xxxxxxxx.xxxxx.xxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
48	XXX.XXX.XX.XXX	xxxxxxx.xxxxxxxxxx.xxx-xxxxxxxx.xx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
49	XXX.XX.XX.XXX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
50	XXX.XXX.XX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
51	XXX.XXX.XX.XXX	xxx-xxx-xx-xxx.xxxxxx.xxxx.xx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
52	XXX.XX.XXX.XXX	xxxxxxxxx.xxxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
53	XXX.XXX.XX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
54	XXX.XX.XXX.XX		Xxxx Xxxxxxxxxx	01/05/2023	verified	High
55	XXX.XX.XXX.X	xxxxxxxx.xxxx.xx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
56	XXX.XXX.XXX.XXX	xxxxxx-xxx-xxx-xxx-xxx.xxxxx.xxxxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
57	XXX.XXX.XXX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
58	XXX.XXX.XXX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
59	XXX.XXX.XXX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
60	XXX.XXX.XXX.XXX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
61	XXX.XX.XXX.XXX	xxxxxxxxxx.xxxxxxx.xx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
62	XXX.XX.XXX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
63	XXX.XXX.XXX.XXX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
64	XXX.XX.XXX.XXX	xxx-xx-xxx-xxx.xxxxxxxxxxxxxxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
65	XXX.XX.XX.XXX	xxxxxxxx.xxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
66	XXX.XX.XXX.XXX	xxxxxx.xxxxxxxxxxxxxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
67	XXX.XX.XXX.XX		Xxxx Xxxxxxxxxx	12/03/2022	verified	High
68	XXX.XXX.XXX.XXX		Xxxx Xxxxxxxxxx	01/05/2023	verified	High
69	XXX.XXX.XXX.XXX	xxxxx.xxxxxxxxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
70	XXX.XX.XX.XX	xxxxxx.xxxxx.xxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
71	XXX.XX.XX.X	xxxxxx.xxxxxxxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
72	XXX.XX.XX.XX	xxxxx.xxxxxxxxx.xxx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
73	XXX.XX.XX.XXX	xxx-xx-xx-xxx.xxxxxxxxxxx.xx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High
74	XXX.XX.XXX.XXX	xxx-xx-xxx-xxx.xxxxxx.xxxx.xx	Xxxx Xxxxxxxxxx	10/11/2023	verified	High
75	XXX.XXX.XX.XX	xxxxxx.xxxx.xx	Xxxx Xxxxxxxxxx	12/03/2022	verified	High

TTP - Tactics, Techniques, Procedures (24)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CWE-22, CWE-23, CWE-24, CWE-29	Path Traversal	predictive	High
2	T1040	CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CWE-74, CWE-643	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CWE-94, CWE-1321	Argument Injection	predictive	High
5	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
7	TXXXX.XXX	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	High
8	TXXXX	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	High
9	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
10	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
11	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
12	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
13	TXXXX.XXX	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	High
14	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	High
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
16	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
17	TXXXX.XXX	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xx-xxxx Xxxxxx Xxxxxxxx	predictive	High
18	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
19	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
20	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
21	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
22	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
23	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High
24	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (414)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/.env	predictive	Low
2	File	/admin/action/new-father.php	predictive	High
3	File	/admin/clientview.php	predictive	High
4	File	/admin/edit_teacher.php	predictive	High
5	File	/admin/fields/manage_field.php	predictive	High
6	File	/admin/index.php	predictive	High
7	File	/admin/list_localuser.php	predictive	High
8	File	/admin/orders/view_order.php	predictive	High
9	File	/admin/regester.php	predictive	High
10	File	/admin/update-clients.php	predictive	High
11	File	/admin_ping.htm	predictive	High
12	File	/admin_route/dec_service_credits.php	predictive	High
13	File	/admin_route/inc_service_credits.php	predictive	High
14	File	/api/controllers/merchant/shop/PosterController.php	predictive	High
15	File	/api/cron/settings/setJob/	predictive	High
16	File	/api/sys/set_passwd	predictive	High
17	File	/api/v1/terminal/sessions/?limit=1	predictive	High
18	File	/app/api/controller/default/Sqlite.php	predictive	High
19	File	/app/controller/Setup.php	predictive	High
20	File	/app/sys1.php	predictive	High
21	File	/application/index/controller/Databasesource.php	predictive	High
22	File	/application/index/controller/Icon.php	predictive	High
23	File	/application/index/controller/Screen.php	predictive	High
24	File	/application/plugins/controller/Upload.php	predictive	High
25	File	/apply.cgi	predictive	Medium
26	File	/apps/reg_go.php	predictive	High
27	File	/arch/x86/mm/cpu_entry_area.c	predictive	High
28	File	/authenticationendpoint/login.do	predictive	High
29	File	/billing/bill/edit/	predictive	High
30	File	/bin/boa	predictive	Medium
31	File	/boaform/device_reset.cgi	predictive	High
32	File	/boafrm/formMapDelDevice	predictive	High
33	File	/bsms_ci/index.php/user/edit_user/	predictive	High
34	File	/cgi-bin/cstecgi.cgi	predictive	High
35	File	/cgi-bin/cstecgi.cgi?action=login	predictive	High
36	File	/cgi-bin/cstecgi.cgi?action=login&flag=1	predictive	High
37	File	/cgi-bin/info.cgi	predictive	High
38	File	/cgi-bin/koha/catalogue/search.pl	predictive	High
39	File	/cgi-bin/mainfunction.cgi	predictive	High
40	File	/cgi-bin/nas_sharing.cgi	predictive	High
41	File	/cgi-bin/R14.2/cgi-bin/R14.2/host.pl	predictive	High
42	File	/cgi-bin/R14.2/easy1350.pl	predictive	High
43	File	/cgi-bin/system_mgr.cgi	predictive	High
44	File	/cgi-bin/wlogin.cgi	predictive	High
45	File	/classes/Login.php	predictive	High
46	File	/classes/Users.php	predictive	High
47	File	/config/getuser	predictive	High
48	File	/core/redirect	predictive	High
49	File	/dashboard/snapshot/*?orgId=0	predictive	High
50	File	/xxxxx/xxxxx	predictive	Medium
51	File	/xxxxxxxxx.xxx	predictive	High
52	File	/xxxxxxxxxxx/xxxxxxxxx.xxxx	predictive	High
53	File	/xxx.xxx	predictive	Medium
54	File	/xxx_xxxxxxxx/	predictive	High
55	File	/xxxxxxxx/xxxxxxxxxxx.xxx	predictive	High
56	File	/xxx/xxx_xxxx.xxx	predictive	High
57	File	/xxxxx/xxxx.xxx	predictive	High
58	File	/xxxxxxx/xxxxxxxxxx/xxxxxx/xxx_xxxx/xxxxxx.xxx	predictive	High
59	File	/xxxxxx/	predictive	Medium
60	File	/xxxxxx/xxxxxxxxxxxxxxxx	predictive	High
61	File	/xxxxxx/xxxxxxxxxxx	predictive	High
62	File	/x/xxxxxxxxxxxxx	predictive	High
63	File	/xxxx.xxx	predictive	Medium
64	File	/xxxx/xxxxx	predictive	Medium
65	File	/xxx/xxxxxxx_xxxxxxx.xxx	predictive	High
66	File	/xxxxx.xxx	predictive	Medium
67	File	/xxxxx.xxx?xxx=xxxx&xxxx=xxxxxxxx&xxxxxx=xxxxx	predictive	High
68	File	/xxxxx_xx/xxx_xxxxxxxx_xxxxxxx.xxx?x=xxx_xxx	predictive	High
69	File	/xxxx_xxxxxxxxx_xxxxxxx.xxx	predictive	High
70	File	/xxxxxxx?xxxxxx=xxxxxxxxx	predictive	High
71	File	/xxxxx/xxxxxxxx	predictive	High
72	File	/xxxxxx/xxxx.xxx	predictive	High
73	File	/xxxxxx/xxxxxx_xxxx.xxx	predictive	High
74	File	/xxxxxx/xxxx.xxx	predictive	High
75	File	/xxxxxxx/xxxxxxxx/xx_xxxxx.xxx	predictive	High
76	File	/xxxxxxxx/xxxxx/xxxxxx_xxxxxxx-xxxxxxxxxx.xxx	predictive	High
77	File	/xxxxx/xxxxxxxxxxx/xxxx	predictive	High
78	File	/xx/xxxxxx/xxxx	predictive	High
79	File	/xxx/xx/xxxxxxxxx/xxxx/xxxxxxx/xxxxx.x	predictive	High
80	File	/xxx/xxxx.xxx	predictive	High
81	File	/xxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxx/	predictive	High
82	File	/xxx/xxxxxx/xxxxxxxx	predictive	High
83	File	/xxxxxx/xxxxx/xxxxx.xxx?xxx_xxxxxxx	predictive	High
84	File	/xxxxxx/xxxxx.xxx	predictive	High
85	File	/xxxxxxx/xxxxxx_xxxxxxxx_xxxx	predictive	High
86	File	/xxxx.xxx	predictive	Medium
87	File	/xxx/xxxx/xxx_xxxx.xxx	predictive	High
88	File	/xxx/xxxxxxxxxx/xxxxxxx.xxx	predictive	High
89	File	/xx_xxx.xxx	predictive	Medium
90	File	/xxxxxxxx.xxx	predictive	High
91	File	/xxxxxxxxx/xxxxxxxx.xxx	predictive	High
92	File	/xxxxxx-xxxxxxx/xxxxx-xxxxxxx.xxx	predictive	High
93	File	/xxxxxxx/	predictive	Medium
94	File	/xxxxxxx/xxxxxxxx/xxxxxxxxxxxxxx	predictive	High
95	File	/xx/xxx-xxxxxx	predictive	High
96	File	/xxx/xxx/xxxx/xxxx_xxxxxx.xxx	predictive	High
97	File	/xxxxx_xxxxxxxxxx/xxxx_xxxxx/	predictive	High
98	File	/xxxxxx/xxxxxxxx/xxxxxxxx.xxx	predictive	High
99	File	/xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
100	File	/xxx-xxx-xxxxx/xxxxxxx	predictive	High
101	File	xxxxxx-xxxxxxx.xxx	predictive	High
102	File	xxxxxx.xxx	predictive	Medium
103	File	xxxxxxx.xxx	predictive	Medium
104	File	xxx-xxxxxxxx.xxx	predictive	High
105	File	xxxx.xxx	predictive	Medium
106	File	xxx/xxxx_xxxx_xxxxxx.xxx	predictive	High
107	File	xxxxx.xxx?xxxx=xxxxxxx&xxxxxx_xxxxx_xx=	predictive	High
108	File	xxxxx/xxxxxxx.xxx	predictive	High
109	File	xxxxx/xx_xxxx.xxx	predictive	High
110	File	xxxxx/xxxxx.xxx	predictive	High
111	File	xxxxx/xxxxx.xxx	predictive	High
112	File	xxxxx/xxx_xxxxxxx/xxxxx.xxx	predictive	High
113	File	xxxxx/xxxxxxx-xxxxxx.xxx	predictive	High
114	File	xxxx/xxxxxxxxx.xxx	predictive	High
115	File	xxx/xxxx/xxxxxxxxx.xxx	predictive	High
116	File	xxx/xxxx/xxxxxxxxxx/xxxxxxxxxxxxxx.xxx	predictive	High
117	File	xxxxxxxxxxx/xxxxx/xxxxxxxxxx/x/xxx.xxx	predictive	High
118	File	xxxxxxxxxxxx/xxxx-xxx-xxxx/xxxxxx/xxxxx/xxx/xxxx/xxxxxx.xxx	predictive	High
119	File	xxxxx.xxx	predictive	Medium
120	File	xxxx/xxx/xxxxxx/xxx-xxxxxx.x	predictive	High
121	File	xxxxxx/xxxxxxx/xxxxxxxxx.xxx	predictive	High
122	File	xxxxxxxxxx-xxxx.xxx	predictive	High
123	File	xxxxxxxxxx_xxxxxx.xxx	predictive	High
124	File	xxxxx-xxxx/xxxxxx.x	predictive	High
125	File	xxxxx-xxxxxx-xxxxx-xxx.xx	predictive	High
126	File	xxxxxxx.xxx	predictive	Medium
127	File	xxxxx.xxx	predictive	Medium
128	File	xxxx_xxxxxxx.xxx	predictive	High
129	File	xxxxxx/xxxxx/xxxxx.xxx	predictive	High
130	File	xxxx_xxxxxxx.xxx	predictive	High
131	File	xx_xxx.xx	predictive	Medium
132	File	xxxxxxx/xxxxx-xxxxx-xxx-xxxxxxxx-xxxxx.xxx	predictive	High
133	File	xxxxxxx/xxxxx-xxxxxxxxxxx-xxx-xxxxxxxxx.xxx	predictive	High
134	File	xxxxxxx/xxxxxx.xxx	predictive	High
135	File	xxxxxxx/xxxxxx.xxx	predictive	High
136	File	xxxxx.xxx	predictive	Medium
137	File	xxxxxxx_xxxx.xxx	predictive	High
138	File	xxxx/xxx/xxxxxxx/xxxxxxxx/xxxxxx.xxx	predictive	High
139	File	xxxx/xxxxx/xxxxxx.xxx	predictive	High
140	File	xxxxxx/x.x	predictive	Medium
141	File	xxxxxxxx.xxx	predictive	Medium
142	File	xxxxx.xxx	predictive	Medium
143	File	xxxxxxxxxxx/xxxxxxxx/xxx/xxxx_xxxx/xxxxxxx/xx_xxxxxxxx.xxx	predictive	High
144	File	xxxxxxxx.xxx	predictive	Medium
145	File	xxxxxxxx_xxxxxx.xxx	predictive	High
146	File	xxxxxxx/xxx/xxx.x	predictive	High
147	File	xxxxx.x	predictive	Low
148	File	xxxx_xxxxxxx.xxx	predictive	High
149	File	xxxx.xxx	predictive	Medium
150	File	xx_xxxx.xxx	predictive	Medium
151	File	xx/xxxxxxxxxxx.x	predictive	High
152	File	xxxxxxxxx.xxx	predictive	High
153	File	xxxxxxxxx/xxxxxxxxx_xxxxxxx.xxx	predictive	High
154	File	xxxxxxxxxx.xxx	predictive	High
155	File	xxxx.xxx	predictive	Medium
156	File	xxxx_xxxxxxx.xxx.xxx	predictive	High
157	File	xxxxxxxxx.xxx	predictive	High
158	File	xxxxxxxxx.xx	predictive	Medium
159	File	xx/xxx/xxxx_xxxxx.x	predictive	High
160	File	xxx/xxxxxx.xxx	predictive	High
161	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	High
162	File	xxxxx.xx	predictive	Medium
163	File	xxxxx.xxx	predictive	Medium
164	File	xxxxxxx.xxx	predictive	Medium
165	File	xxxxxxxxxxxxxxxxx.xxx	predictive	High
166	File	xxxxxxxxx/xxxxxxx_xxxx/xxxxxxxxx/xxxxxx_xxxx.xxx	predictive	High
167	File	xx/xxxxx/xxxxxx.xx	predictive	High
168	File	xxxxxxxxxxx.xxx	predictive	High
169	File	xxxx/xxx/xxxxx/xxx/xxxx/xxxxxxxxx.xxxx	predictive	High
170	File	xxxxxx/xxxxxxx/xxxxx.x	predictive	High
171	File	xxxx.xxx	predictive	Medium
172	File	xx_xxx.x	predictive	Medium
173	File	xxxxxxxxx.xxx	predictive	High
174	File	xxxxx-xxxxxx-xxxxxx.xxxx	predictive	High
175	File	xxxxx.xxx	predictive	Medium
176	File	xxxxx.xxx	predictive	Medium
177	File	xxxxx_xxxxxxx.xxx	predictive	High
178	File	xxxxxxxxxxxx.xxx	predictive	High
179	File	xxx.x	predictive	Low
180	File	xxxxxxxx_xxxx.xxx	predictive	High
181	File	xxxxxxxxx.xxx	predictive	High
182	File	xxxxxxx/xxxxxx%xxxxxxx/xxxxxx_xxx.xxx&xxxx=xxxxxxxxxxxxxxxxxx&xxxx=x	predictive	High
183	File	xxx/xxxxxxxxx/xxx.x	predictive	High
184	File	xxx/xxxx/xxxx.x	predictive	High
185	File	xxx/xxxxxxxxx/xx_xxxxxxxxx_xxxxxxx.x	predictive	High
186	File	xxx/xxxxxxxxx/xx_xxxxxx_xxx.x	predictive	High
187	File	xxx/xxx/xx_xxx.x	predictive	High
188	File	xxxx.x	predictive	Low
189	File	xxx.xxx	predictive	Low
190	File	xxxxx_xxxxxxx.xxx	predictive	High
191	File	xxxxx_xxxxxx_xxxxxx.xxx	predictive	High
192	File	xxxxx_xxxxxx.xxx	predictive	High
193	File	xxxxxxx.xxx	predictive	Medium
194	File	xxxx.xxx	predictive	Medium
195	File	xxxxxx/xxxxxxxxxx/xxx/xxxx.xxx	predictive	High
196	File	xxxx/xxxx_xxxxxx.xxx	predictive	High
197	File	xxxxxxxx.xx	predictive	Medium
198	File	xxxxx/xxxxxxx.xxx	predictive	High
199	File	xxxxxxxxx.xx	predictive	Medium
200	File	xxxxxxxx.xxx	predictive	Medium
201	File	xxxxxxx.xxx	predictive	Medium
202	File	xxxxx_xxx_xxxxxx	predictive	High
203	File	xxxxxxxx_xxxx_xxxxxxx_xxxxxx.xxx	predictive	High
204	File	xxxxx.xxx	predictive	Medium
205	File	xxxxx.xxx	predictive	Medium
206	File	xxxxxxxx.xxx	predictive	Medium
207	File	xxxxxxxxxx.xxx	predictive	High
208	File	xxxxxxx/xxxxx.xxx	predictive	High
209	File	xxxxxx-xxxxxxxxxx.xxx	predictive	High
210	File	xxxxxx/xxx.xxx	predictive	High
211	File	xxxxxx/xxxxxxxxxxx/xxx/xxxxxxxxxx/xxxx.xxx	predictive	High
212	File	xxxxxx/xxxxx.xxx	predictive	High
213	File	xxxxx.xxx	predictive	Medium
214	File	xx-xxxxxx.x	predictive	Medium
215	File	xxxx_xxxxxxx.xxx	predictive	High
216	File	xxxx$xx.xxx	predictive	Medium
217	File	xxxxxxxxxxxx.xx	predictive	High
218	File	xxx/xxxx/xxxx/xxx/xxxxxxxx/xxxx/xxxxx/xxxxxxx.xxxx	predictive	High
219	File	xxx/xxxx/xxxx/xxx/xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
220	File	xxx/xxxx.xx	predictive	Medium
221	File	xxx/xxxx_xx_xxx.x	predictive	High
222	File	xxxxx_xxxx.xxx	predictive	High
223	File	xxxxxx.x	predictive	Medium
224	File	xxxxxxxxxxxxxx.xxx	predictive	High
225	File	xxxxxxxxx/x-xxx-xxxxxxxx.xxx	predictive	High
226	File	xxxxxxx.xxx	predictive	Medium
227	File	xxxx-xxxxx.xxx	predictive	High
228	File	xxxx-xxxxxxxx.xxx	predictive	High
229	File	xxxxxx-xxxxx.xxx	predictive	High
230	File	xxxxxx-xxxxxxxx.xxx	predictive	High
231	File	xxxxxx_xxxxxxxx_xxxx.xxx	predictive	High
232	File	xxxxxx_xxxx.xxx	predictive	High
233	File	xxxxxx_xxxxxxx.xxx	predictive	High
234	File	xxxxx/xxxxxxxx-xxxxxxxxx.xxx	predictive	High
235	File	xxxx_xxxxx.xxx	predictive	High
236	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	High
237	File	xxxxxxxxx.xxx	predictive	High
238	File	xxxxxxxx.xxx	predictive	Medium
239	File	xxxx_xxxxxxx.xxx	predictive	High
240	File	xxxxxx.xxx	predictive	Medium
241	File	xxx/xxxxxxx/xxxxxxx/xxxxxxxxxx?xx=x	predictive	High
242	File	xxxxxxx/xx/xxxx/xxx/xxxxxx/xxxxxxxxx.xx	predictive	High
243	File	xx-xxxxx/xxxx.xxx?xxxx_xxxx=xxxxx	predictive	High
244	File	xx-xxxxxxxx/xxxxx-xx-xxxxxx-xxxxxx.xxx	predictive	High
245	File	xx-xxxxxxxx/xxxx.xxx	predictive	High
246	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	High
247	File	xxxx.xx	predictive	Low
248	File	\xxx\xxxxx\xxxxxx.xxx	predictive	High
249	File	__xxx/xxxxxxxx/xxxxxx/xxxx/xxxxxx-xxxx?xxxxxx_xxxx=xxxx	predictive	High
250	Library	/xxx/xxx/xxx/xxxx/xxxxxxxxxx/xxxxx/xxxxx.xxx	predictive	High
251	Library	/_xxx_xxx/xxxxx.xxx	predictive	High
252	Library	xx/xxx/xxxx_xxxxxx.xxx	predictive	High
253	Library	x:/xxxxxxx xxxxx/xxxxx/xxxxxxx.xxx	predictive	High
254	Library	xxxx/xxx/xxxxxx.xxx	predictive	High
255	Library	xxx/xxxx_xxxxx.x	predictive	High
256	Library	xxx/xx/xxxxx/xxxxxxxxxx/xxxx.xx	predictive	High
257	Library	xxxxxxxxxx.xxx	predictive	High
258	Library	xxxx-xxxxxxxxxx/xxx/xxxx/xxxxxxxxxx/xxxx_xxxxxxxxx.xx	predictive	High
259	Library	xxxxx/xxxxxx/xxx/xxxxx/xxxxx.xxxxx_xx.xxx	predictive	High
260	Library	xxxxxx.xxx	predictive	Medium
261	Argument	x_xxxx_xxxxxx	predictive	High
262	Argument	xx/xx	predictive	Low
263	Argument	xxxxxxx	predictive	Low
264	Argument	xxxxxxx	predictive	Low
265	Argument	xxxxx_xx	predictive	Medium
266	Argument	xxxxxx_xxxxxxxxxxx	predictive	High
267	Argument	xxxxxxxxxxxxx	predictive	High
268	Argument	xxx_xxxx_xx	predictive	Medium
269	Argument	xxxxxx	predictive	Low
270	Argument	xxxxxxxx	predictive	Medium
271	Argument	xxxxx	predictive	Low
272	Argument	xxxxxx	predictive	Low
273	Argument	xxxxxxxx	predictive	Medium
274	Argument	xxxx_xxx_xxxx	predictive	High
275	Argument	xxx	predictive	Low
276	Argument	xxxxx/xxx	predictive	Medium
277	Argument	xxxxxxxx	predictive	Medium
278	Argument	xxxxxxxxxx	predictive	Medium
279	Argument	xxx	predictive	Low
280	Argument	xxxxx_xx	predictive	Medium
281	Argument	xxxxxx xxxx xxxx	predictive	High
282	Argument	xxxxxxxxxxxxxx	predictive	High
283	Argument	xxx	predictive	Low
284	Argument	xxxxxxxxxxx	predictive	Medium
285	Argument	xxxxxxx	predictive	Low
286	Argument	xxxxxx	predictive	Low
287	Argument	xxxx.xx/xxxx.xxxxxxxx/xxxx.xxxxx/xxxx.xxxxxxx	predictive	High
288	Argument	xxxxx	predictive	Low
289	Argument	xxxx	predictive	Low
290	Argument	xxx_xx	predictive	Low
291	Argument	xxxxxxxxxxx	predictive	Medium
292	Argument	xxxx	predictive	Low
293	Argument	xxxxxxxxx	predictive	Medium
294	Argument	xxxxxxxx[xxxx_xxx]	predictive	High
295	Argument	xxxxxx/xxxxxx	predictive	High
296	Argument	xxxx	predictive	Low
297	Argument	xxxx	predictive	Low
298	Argument	xxxxxxxx	predictive	Medium
299	Argument	xxxxxxx	predictive	Low
300	Argument	xxxxxxx	predictive	Low
301	Argument	xxxxxx_xxxx_xx	predictive	High
302	Argument	xxxxxxxxx	predictive	Medium
303	Argument	xxxxxxxxx/xxxxxxxx	predictive	High
304	Argument	xxxxx/xxxxx/xxxxx/xxxxxxx	predictive	High
305	Argument	xxxxxxxxxxxxxxxxxxx	predictive	High
306	Argument	xxxxxx_xxxxxx_xxxxx	predictive	High
307	Argument	xxxx	predictive	Low
308	Argument	xxxx	predictive	Low
309	Argument	xxxx/xxxxxxxx/xxxxxxxx	predictive	High
310	Argument	xxxx xxxxxxx	predictive	Medium
311	Argument	xxxxxxxx	predictive	Medium
312	Argument	xxxx_xxxx	predictive	Medium
313	Argument	xx	predictive	Low
314	Argument	xx	predictive	Low
315	Argument	xxxxx	predictive	Low
316	Argument	xxxxx	predictive	Low
317	Argument	xxxxxxxxx	predictive	Medium
318	Argument	xx/xxxx/xxxx/xxxx/xxx/xxxxxxx	predictive	High
319	Argument	xxxx_xxxx/xxxx_xxxx	predictive	High
320	Argument	xxxx	predictive	Low
321	Argument	xxxx_xxxx	predictive	Medium
322	Argument	xxxxxxxx[xx]	predictive	Medium
323	Argument	xxxxxxx	predictive	Low
324	Argument	xxxxxx/xxxxx	predictive	Medium
325	Argument	xxxxxxxx/xxxxx_xx	predictive	High
326	Argument	xxxx	predictive	Low
327	Argument	xxxx_xxxx	predictive	Medium
328	Argument	xxxxxx/xxxxxxxxx/xxxxxx_xxxx	predictive	High
329	Argument	xxxxxx	predictive	Low
330	Argument	xxxxxxx	predictive	Low
331	Argument	xx_xxxx	predictive	Low
332	Argument	xxxxxx	predictive	Low
333	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	High
334	Argument	xxx	predictive	Low
335	Argument	xxxxx	predictive	Low
336	Argument	xxxxxx	predictive	Low
337	Argument	xxxx	predictive	Low
338	Argument	xxxxxx	predictive	Low
339	Argument	xxxxxxxxxxx	predictive	Medium
340	Argument	xxxxxxxxxxx/xxxxxxxxx	predictive	High
341	Argument	xxxxxx	predictive	Low
342	Argument	xxxxxx	predictive	Low
343	Argument	xxxxx_xxxx	predictive	Medium
344	Argument	xxxxxxxx	predictive	Medium
345	Argument	xxxxxxxx	predictive	Medium
346	Argument	xxxxxxx xxxxx/xxxx xxxx/xxxxxxx/xxxxx xxxxxxxx/xxx/xxxxxxxxx xxx/xxx x/xxx xxx/xxxxxxxx xxxx/xxxxxxxx xxxx/xx/xxxx/xxxx/xxxxxxxx/xxxxxxxx xxxx	predictive	High
347	Argument	xxx_xxx	predictive	Low
348	Argument	xxxxxxxxx	predictive	Medium
349	Argument	xxxxxxx	predictive	Low
350	Argument	xxxxxxxx	predictive	Medium
351	Argument	xxxxxxx xxxxx	predictive	High
352	Argument	xxxxxxx_xx	predictive	Medium
353	Argument	xxxxxxx_xxxx	predictive	Medium
354	Argument	xxxxxxxxxxxxx	predictive	High
355	Argument	xxx	predictive	Low
356	Argument	xxxxx	predictive	Low
357	Argument	xxxxxxxx	predictive	Medium
358	Argument	xxxxxxxx	predictive	Medium
359	Argument	xxxxxxxx_xxx	predictive	Medium
360	Argument	xxxxxx	predictive	Low
361	Argument	xxxxxx_xxxx	predictive	Medium
362	Argument	xxxxxxxx	predictive	Medium
363	Argument	xxxxx	predictive	Low
364	Argument	xxxx_xxx	predictive	Medium
365	Argument	xxxxxxxxxx	predictive	Medium
366	Argument	xxxxxxxxxx/xxxxxxxxxxx/xxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxxxxxx/xxxxxxxxxxxxx	predictive	High
367	Argument	xxxxxx	predictive	Low
368	Argument	xxx	predictive	Low
369	Argument	xxxxx xxxx xxxxxxx	predictive	High
370	Argument	xxxx$xx.xxx	predictive	Medium
371	Argument	xxxx	predictive	Low
372	Argument	xxx	predictive	Low
373	Argument	xxx	predictive	Low
374	Argument	xxxxxx-xxx	predictive	Medium
375	Argument	xxxxxx	predictive	Low
376	Argument	xxxxxxxxxxxx	predictive	Medium
377	Argument	xxxx	predictive	Low
378	Argument	xxxxx	predictive	Low
379	Argument	xxxxxxxx-xxxxxxxx	predictive	High
380	Argument	xxxxxxxxxxx	predictive	Medium
381	Argument	xxxxxxxxxx	predictive	Medium
382	Argument	xxx	predictive	Low
383	Argument	xxxxxxxx_xxxx	predictive	High
384	Argument	xxx	predictive	Low
385	Argument	xxxx	predictive	Low
386	Argument	xxxxxxxxx	predictive	Medium
387	Argument	xxxxxx	predictive	Low
388	Argument	xxxxxx	predictive	Low
389	Argument	xxxxxxxx	predictive	Medium
390	Argument	xxxxxxxx/xxxxxxxx	predictive	High
391	Argument	xxxxxxxx_xxx	predictive	Medium
392	Argument	xxxx_xx	predictive	Low
393	Argument	xxx	predictive	Low
394	Argument	xxx	predictive	Low
395	Argument	xxx	predictive	Low
396	Argument	xxxxx xxx	predictive	Medium
397	Argument	xxxxx	predictive	Low
398	Argument	xxxxx	predictive	Low
399	Argument	xx_xxxxx_xx/xx_xxxxx_xxxxx/xx_xxxxx_xxx	predictive	High
400	Argument	xx_xxxx/xx_xxx/xx_xxxx/xx_xxxxx_xxx/xxxx_xxx/xxxx_xxxx	predictive	High
401	Input Value	../	predictive	Low
402	Input Value	../../../../xxxxx_xxxxx.xxx	predictive	High
403	Input Value	..\..	predictive	Low
404	Input Value	/../xxx/xxxxxx-	predictive	High
405	Input Value	/../xxx/xxxxxxxx	predictive	High
406	Input Value	/../xxx/xxxxxxxx-	predictive	High
407	Input Value	<xxxxx xxx xxxxxxx=xxxxxx(xxxxxxxx.xxxxxx)>	predictive	High
408	Input Value	<xxx xxx="x" xxxxxxx="xxxxxxx.xxx(x)">	predictive	High
409	Input Value	>><xxx/xxx/xxxxxxx=xxxxx(x)>	predictive	High
410	Input Value	xx	predictive	Low
411	Input Value	xxxxxxxxxx	predictive	Medium
412	Input Value	xxxxxxx -xxx	predictive	Medium
413	Network Port	xxxxx	predictive	Low
414	Network Port	xxx xxxxxx xxxx	predictive	High

References (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!