GandCrab Analysisinfo

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (565)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en534
ru10
es8
de4
ar2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

US: USA556
CN: China6
ES: Spain2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

RedLine Stealer3
AsyncRAT2
NjRAT1
DPRK1

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined122
Content Management System24
Forum Software8
WordPress Plugin8
Programming Language Software8

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

Not Defined74
SourceCodester10
Pearlinger8
Google6
Novell4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Pearlinger Products8
PHPWind4
Google Chrome4
Microsoft Windows2
Google Android2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemEPSSCTICVE
1LogicBoard CMS away.php redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable0.000000.41
2DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.028200.26CVE-2010-0966
3Tiki Admin Password tiki-login.php improper authentication8.07.7$0-$5k$0-$5kNot DefinedOfficial Fix0.919800.74CVE-2020-15906
4FLDS redir.php sql injection7.37.3$0-$5k$0-$5kHighUnavailable0.002910.09CVE-2008-5928
5My Link Trader out.php sql injection6.35.7$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.03
6Bitrix Site Manager redirect.php link following5.34.7$0-$5k$0-$5kUnprovenUnavailable0.001370.26CVE-2008-2052
7SPIP spip.php cross site scripting3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.001931.02CVE-2022-28959
8OpenX adclick.php redirect5.34.7$0-$5k$0-$5kUnprovenUnavailable0.005840.13CVE-2014-2230
9Vunet VU Web Visitor Analyst redir.asp sql injection7.37.1$0-$5k$0-$5kHighWorkaround0.001620.10CVE-2010-2338
10GetSimpleCMS index.php redirect6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.002030.03CVE-2019-9915
11PHPWind goto.php redirect6.36.3$0-$5k$0-$5kNot DefinedNot Defined0.003480.04CVE-2015-4134
12Openads adclick.php Remote Code Execution7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.025460.02CVE-2007-2046
13Serendipity exit.php privileges management6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.02
14kurniaramadhan E-Commerce-PHP Create Product Page create_product.php cross site scripting2.42.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000450.24CVE-2024-13205
15vu Mass Mailer Login Page redir.asp sql injection7.36.6$0-$5k$0-$5kProof-of-ConceptNot Defined0.004960.02CVE-2007-6138
16TikiWiki tiki-register.php input validation7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.010750.48CVE-2006-6168
17vBulletin redirector.php6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.002330.02CVE-2018-6200
18Pyrophobia out.php cross site scripting4.34.1$0-$5k$0-$5kProof-of-ConceptNot Defined0.001990.04CVE-2007-1159
19CodeAstro Hospital Management System Add Laboratory Equipment Page his_admin_add_lab_equipment.php cross site scripting4.14.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000840.17CVE-2024-11676
20PHPWind goto.php cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.002540.00CVE-2015-4135

IOC - Indicator of Compromise (181)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsIdentifiedTypeConfidence
13.64.163.50ec2-3-64-163-50.eu-central-1.compute.amazonaws.comGandCrab10/24/2021verifiedVery Low
23.215.23.197ec2-3-215-23-197.compute-1.amazonaws.comGandCrab05/05/2022verifiedLow
35.23.49.811241393-cn03460.tw1.ruGandCrab05/24/2019verifiedLow
45.39.221.60GandCrab07/17/2021verifiedLow
55.135.183.146freya.stelas.deGandCrab10/24/2021verifiedLow
65.144.168.210mail.xdeers.comGandCrab04/13/2022verifiedMedium
713.37.189.21ec2-13-37-189-21.eu-west-3.compute.amazonaws.comGandCrab02/20/2023verifiedLow
813.76.158.123GandCrab07/17/2021verifiedLow
913.107.21.200GandCrab04/08/2022verifiedMedium
1015.188.214.230ec2-15-188-214-230.eu-west-3.compute.amazonaws.comGandCrab02/20/2023verifiedLow
1120.42.65.92GandCrab05/07/2022verifiedMedium
1220.42.73.29GandCrab05/07/2022verifiedMedium
1320.50.64.11GandCrab10/09/2021verifiedLow
1420.189.173.20GandCrab05/07/2022verifiedMedium
1523.56.169.147a23-56-169-147.deploy.static.akamaitechnologies.comGandCrab02/20/2023verifiedMedium
1623.56.169.152a23-56-169-152.deploy.static.akamaitechnologies.comGandCrab02/20/2023verifiedMedium
1723.100.15.180GandCrab04/14/2022verifiedMedium
1823.205.105.157a23-205-105-157.deploy.static.akamaitechnologies.comGandCrab05/07/2022verifiedMedium
1923.221.227.165a23-221-227-165.deploy.static.akamaitechnologies.comGandCrab02/20/2023verifiedMedium
2023.221.227.172a23-221-227-172.deploy.static.akamaitechnologies.comGandCrab02/20/2023verifiedMedium
2123.236.62.147147.62.236.23.bc.googleusercontent.comGandCrab04/14/2022verifiedLow
2234.102.136.180180.136.102.34.bc.googleusercontent.comGandCrab10/09/2021verifiedVery Low
2335.205.61.6767.61.205.35.bc.googleusercontent.comGandCrab10/09/2021verifiedVery Low
2439.107.34.197GandCrab10/09/2021verifiedLow
2545.33.91.79li1037-79.members.linode.comGandCrab04/08/2022verifiedMedium
2645.118.145.96GandCrab10/09/2021verifiedLow
2746.32.228.22720808.vps-10.comGandCrab04/13/2022verifiedLow
2847.75.206.148GandCrab04/14/2022verifiedMedium
2950.63.202.89ip-50-63-202-89.ip.secureserver.netGandCrab04/08/2022verifiedMedium
3050.87.58.16550-87-58-165.unifiedlayer.comGandCrab04/08/2022verifiedMedium
31XX.XX.XXX.XXXxxx-xxx-xx-xx.xxxxxxxxx.xxx.xxxxxXxxxxxxx02/20/2023verifiedLow
32XX.XX.XX.XXXxxxxx.xx-xx-xx-xx.xxXxxxxxxx04/08/2022verifiedMedium
33XX.XXX.XX.XXXxxxxx.xx-xx-xxx-xx.xxXxxxxxxx10/24/2021verifiedLow
34XX.XXX.XX.XXxxx-xxxxxxxx.xxx.xxx.xxxXxxxxxxx10/24/2021verifiedVery Low
35XX.XX.X.XXXxxx-xx-xx-x-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxxx04/13/2022verifiedLow
36XX.XX.XXX.XXXxxx-xx-xx-xxx-xxx.xx-xxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedLow
37XX.XX.XX.XXxxx-xx-xx-xx-xx.xx-xxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxxx04/29/2022verifiedLow
38XX.XXX.XXX.XXxxxx.xxxx.xxxxxXxxxxxxx10/09/2021verifiedLow
39XX.XXX.XXX.XXXXxxxxxxx05/07/2022verifiedMedium
40XX.XXX.XXX.XXXXxxxxxxx05/07/2022verifiedMedium
41XX.XX.XXX.XXxxxx.xx-xx-xx-xxx.xxXxxxxxxx10/09/2021verifiedLow
42XX.XXX.XX.XXXxx-xxx-xx-xxx.xxx.xxxxxxxxxxxx.xxXxxxxxxx04/14/2022verifiedMedium
43XX.XX.XXX.XXxx.xxx.xx.xx.xxxxxx.xxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
44XX.XX.XXX.XXXxxx.xxx.xx.xx.xxxxxx.xxxxxx.xxxXxxxxxxx10/09/2021verifiedLow
45XX.XXX.XXX.XXXxxxx.xxxxxxxxxxxxxxxxx.xxxXxxxxxxx07/15/2021verifiedLow
46XX.XXX.XXX.XXXXxxxxxxx05/06/2022verifiedMedium
47XX.XXX.XXX.XXxxxxxxxxxxxx.xx.xxxxxxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
48XX.XX.XXX.XXXxxxxx.xxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
49XX.XXX.XXX.XXXxxxxxxxx.xxxxxxxxxxx.xxxXxxxxxxx10/09/2021verifiedLow
50XX.XX.XXX.XXxx-xx-xxx-xx.xxxxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
51XX.XX.XX.XXXXxxxxxxx05/07/2022verifiedMedium
52XX.XX.XXX.XXxxxxxx-xxxxx.xx-xxxxxxx.xxXxxxxxxx05/07/2022verifiedLow
53XX.XXX.XXX.XXxx-xx-xxx-xxx-xx.xxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
54XX.XXX.XXX.XXXxx-xx-xxx-xxx-xxx.xxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
55XX.XXX.XXX.Xxxxxx.xxXxxxxxxx02/15/2018verifiedLow
56XX.XX.XXX.XXxxxxx.xxxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
57XX.X.XXX.XXXxxxx-xxx.xxxxxx.xxxxxxx.xxx.xxXxxxxxxx04/08/2022verifiedMedium
58XX.XXX.XX.XXXxxxxxx.xxx-xxxx.xxxXxxxxxxx04/13/2022verifiedMedium
59XX.XXX.XXX.Xxxxxxxx.xxxxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
60XX.XXX.XXX.XXxx-xxxxxx.xxxxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
61XX.XXX.XX.XXxxx.xxxx.xxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
62XX.XXX.XX.XXxxx.xxxx.xxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
63XX.XXX.XX.XXxxx.xxxxx.xxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
64XX.XXX.XX.XXXxxx.xxxxxxx.xxxxx.xxxXxxxxxxx10/09/2021verifiedLow
65XX.XXX.XX.XXXxxx.xxxx.xxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
66XX.XXX.XX.XXXxx.xxxxx.xxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
67XX.XXX.XX.XXXxxxxxxx07/15/2021verifiedLow
68XX.XXX.XXX.Xxxxxxxx.xxxxx.xxx.xxXxxxxxxx10/09/2021verifiedLow
69XX.XXX.XXX.XXxxxxxxxx.xxxxx.xxx.xxXxxxxxxx04/08/2022verifiedMedium
70XX.XXX.XXX.XXxxxxxx.xxxxx.xxxxxxxxx.xxXxxxxxxx05/24/2019verifiedLow
71XX.XX.XX.XXXxxxxx.xxxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
72XX.XXX.XX.XXxxxx.xxxxxxxx.xxxXxxxxxxx10/09/2021verifiedLow
73XX.XXX.XX.XXXxxxxx.xxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
74XX.XX.XXX.XXxxxxxx.xxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
75XX.XXX.XX.XXxxxx-xx-xxx-xx-xx.xxxxxx-xx-xxxxxx.xxXxxxxxxx04/08/2022verifiedLow
76XX.XXX.XXX.XXXxxxxxxx.xxxxxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
77XX.XX.XX.XXXxx-xx-xx-xxx.xx.xxx-xxx.xxXxxxxxxx04/08/2022verifiedMedium
78XX.XXX.XX.XXXxxxxxxxx.xxxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
79XX.XXX.XX.XXxxxx-xx-xxx-xx-xx.xxxxxx-xx-xxxxxx.xxXxxxxxxx07/21/2022verifiedLow
80XX.XXX.XXX.XXXxxxxxxx04/08/2022verifiedMedium
81XX.XXX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
82XX.XX.XXX.XXXxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxxxxx07/15/2021verifiedLow
83XXX.XXX.XX.XXXXxxxxxxx02/15/2018verifiedLow
84XXX.XX.XXX.XXXxxxxxxx04/08/2022verifiedMedium
85XXX.XXX.XX.XXXXxxxxxxx04/08/2022verifiedMedium
86XXX.XX.XX.XXXXxxxxxxx10/24/2021verifiedLow
87XXX.XX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
88XXX.XX.XXX.XXXXxxxxxxx04/14/2022verifiedMedium
89XXX.XX.XXX.XXXxxxxxxx04/08/2022verifiedMedium
90XXX.XX.XXX.XXXXxxxxxxx04/14/2022verifiedMedium
91XXX.XX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
92XXX.XX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
93XXX.XX.XX.XXXXxxxxxxx04/08/2022verifiedMedium
94XXX.XX.XX.XXXXxxxxxxx04/08/2022verifiedMedium
95XXX.XX.XX.XXXXxxxxxxx04/14/2022verifiedMedium
96XXX.XX.XX.XXXXxxxxxxx04/13/2022verifiedMedium
97XXX.XX.XX.XXXXxxxxxxx04/14/2022verifiedMedium
98XXX.XX.XX.XXXxxxxxxx04/08/2022verifiedMedium
99XXX.XXX.XX.XXXxxxxxxx05/07/2022verifiedMedium
100XXX.XXX.XXX.XXXxx.xxxx.xxxxxxx.xx.xxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
101XXX.XX.XXX.XXXxx-xxx.xxxxxxxxx.xxXxxxxxxx05/06/2022verifiedMedium
102XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
103XXX.XX.XXX.XXXXxxxxxxx02/15/2018verifiedLow
104XXX.XX.XXX.XXXxxxxxxx03/31/2022verifiedMedium
105XXX.XXX.XX.XXxxxxxxx.xxxXxxxxxxx10/24/2021verifiedLow
106XXX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
107XXX.XXX.XXX.XXXxxxxxx.xxxx-xxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
108XXX.XX.XXX.XXxxxx.xx-xxx-xx-xxx.xxXxxxxxxx04/08/2022verifiedMedium
109XXX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
110XXX.XX.XXX.XXXXxxxxxxx10/24/2021verifiedLow
111XXX.XX.X.XXXXxxxxxxx04/14/2022verifiedMedium
112XXX.XX.XXX.XXxxxxxx.xx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx10/24/2021verifiedLow
113XXX.XX.XX.XXxx-xxx-xx-xx-xx.xxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
114XXX.XXX.XXX.XXXxxxxxxx10/09/2021verifiedLow
115XXX.XX.XXX.XXXxxxx.xxxxxx.xxxXxxxxxxx04/14/2022verifiedMedium
116XXX.XXX.X.XXxxxx.xxxx.xxxXxxxxxxx04/13/2022verifiedMedium
117XXX.XXX.X.XXxxxx.xxxx.xxxXxxxxxxx04/13/2022verifiedMedium
118XXX.XXX.XXX.XXxxx-xxx-xxx-xx.xxx.xxx.xxxxxxxxxxxx.xxXxxxxxxx03/31/2022verifiedLow
119XXX.XX.XXX.XXXxxxxxxx04/08/2022verifiedMedium
120XXX.XXX.XXX.XXXXxxxxxxx10/09/2021verifiedLow
121XXX.XX.XX.XXXxxx.xx.xx.xxx.xxxxxxxxx.xxxXxxxxxxx10/24/2021verifiedLow
122XXX.XX.XX.XXXxxx.xx.xx.xxx.xxxxxxxxx.xxxXxxxxxxx10/24/2021verifiedLow
123XXX.XXX.XXX.XXXxxxxxx.xxxxx.xxXxxxxxxx10/24/2021verifiedLow
124XXX.XXX.XX.XXXXxxxxxxx10/09/2021verifiedLow
125XXX.XX.XX.XXXXxxxxxxx07/17/2021verifiedLow
126XXX.XXX.XXX.XXXxxxxxx.xxxxx.xxxxxxXxxxxxxx04/08/2022verifiedMedium
127XXX.XX.XXX.XXXxxxxxxxx.xx-xxx-xx-xxx.xxXxxxxxxx04/08/2022verifiedMedium
128XXX.XXX.XX.XXXxxxxxx.xxxxxxx.xxXxxxxxxx10/24/2021verifiedLow
129XXX.XXX.XX.XXXxxxxx.xxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
130XXX.XXX.XX.XXXxxxxx.xxxxxx.xxXxxxxxxx10/09/2021verifiedLow
131XXX.XXX.XX.XXxxxxxx.xxxxxxx.xxx.xxXxxxxxxx04/08/2022verifiedMedium
132XXX.XX.XXX.XXxxxxxxxxxxxx.xxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
133XXX.XX.XXX.XXXXxxxxxxx04/13/2022verifiedMedium
134XXX.XX.XXX.Xxxxx.xxx.xxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
135XXX.XXX.XXX.XXXxxxxxxx10/24/2021verifiedLow
136XXX.XXX.XXX.XXXxxxxxx.xxxxx.xxXxxxxxxx10/24/2021verifiedLow
137XXX.XXX.XX.XXXxxxxxx.xx.xxXxxxxxxx04/08/2022verifiedMedium
138XXX.XXX.XX.XXXxxxxxxxxxx.xx.xxxxxxx.xxxXxxxxxxx10/09/2021verifiedLow
139XXX.XXX.XX.XXXxxxxxxxxxx.xx.xxxxxxx.xxxXxxxxxxx10/09/2021verifiedLow
140XXX.XXX.XXX.XXXxxxxxxx04/08/2022verifiedMedium
141XXX.XXX.XXX.XXxxxxxx.xxxxxxx.xxx.xxXxxxxxxx04/14/2022verifiedMedium
142XXX.XXX.XXX.XXXxxxxxx.xxxxxxx.xxx.xxXxxxxxxx04/08/2022verifiedMedium
143XXX.XXX.XXX.XXXxxxxxxx10/09/2021verifiedLow
144XXX.XX.XXX.XXxxxxx.xxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
145XXX.XXX.XX.XXXxxx.xxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
146XXX.XXX.XX.XXXxxxxxxxxxx.xxxxxxx.xxx.xxxXxxxxxxx04/08/2022verifiedLow
147XXX.XX.XXX.XXXxxxxxxx07/15/2021verifiedLow
148XXX.XX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
149XXX.XXX.XX.XXxxxxxx.xxxxxxx.xxx.xxXxxxxxxx04/08/2022verifiedMedium
150XXX.XX.XXX.XXxxxx.xxxxxxxxxxx.xxxXxxxxxxx05/06/2022verifiedMedium
151XXX.XX.XXX.XXxxxx-xxxxxx-xx-xxxxxxxxx-xx.xxxxx.xxXxxxxxxx10/24/2021verifiedLow
152XXX.XX.XXX.XXxxxx-xxxxxx-xx-xxxxxxxxx-xx.xxxxx.xxXxxxxxxx04/13/2022verifiedMedium
153XXX.XXX.XXX.XXxxx-xxx-xxx-xx.xxxxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
154XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xxxxxxxxxxxx.xxxXxxxxxxx05/06/2022verifiedMedium
155XXX.XXX.XXX.XXXxxxxx.xxxxxxxxxxxxxx.xxxXxxxxxxx04/13/2022verifiedMedium
156XXX.X.XXX.XXXxxxxxxxxx.xxx-xxxx.xxXxxxxxxx04/08/2022verifiedMedium
157XXX.XXX.XX.XXXxxxxxxx10/24/2021verifiedLow
158XXX.XXX.XXX.XXxxxxxxx04/13/2022verifiedMedium
159XXX.XXX.XX.XXXxxxxx.xxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
160XXX.XX.XXX.XXXxxxxxxx04/13/2022verifiedMedium
161XXX.XX.XXX.XXXxxxxxxx04/13/2022verifiedMedium
162XXX.XX.XX.XXXxxxxxxx04/08/2022verifiedMedium
163XXX.XXX.XXX.XXxxxxxxx-xxxxx.xx.xxXxxxxxxx04/08/2022verifiedMedium
164XXX.XXX.XXX.XXXxxx.xxxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
165XXX.XXX.XXX.XXXxxxxxxxxx.xxx-xxxxxxx.xxxXxxxxxxx04/14/2022verifiedLow
166XXX.XX.XX.XXXxxxxx-xxxxx-xx.xxxxxxxxxxxxx.xxxXxxxxxxx10/09/2021verifiedVery Low
167XXX.XX.XX.XXXxxxxxxx04/29/2022verifiedMedium
168XXX.XX.XXX.XXXx-xxxx.x-xxxxxx.xxxXxxxxxxx07/17/2021verifiedLow
169XXX.XX.XX.XXXxxx-xx-xx-xxx.xxx.xxxxxxxxxxx.xxxXxxxxxxx10/09/2021verifiedLow
170XXX.XXX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
171XXX.XXX.XX.Xxxxxxxxxxx.xxx.xxxXxxxxxxx10/09/2021verifiedLow
172XXX.XXX.XX.Xxxxxxxxx.xxx.xxxXxxxxxxx10/09/2021verifiedLow
173XXX.XXX.XX.XXXxxxx-xxx-xx.xxxxxxxxxx.xxxxxxx.xxx.xxxXxxxxxxx04/08/2022verifiedLow
174XXX.XXX.XXX.XXXxxx.xxx.xxx.xxx.xxxxxx.xxxxxx.xxxXxxxxxxx10/24/2021verifiedLow
175XXX.XX.XX.XXxxxx.xxx.xxxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
176XXX.XX.XX.XXXxxxxx.xxx.xxxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
177XXX.XX.XXX.XXxxxxxxxx.xxx.xxxxx.xxxXxxxxxxx10/09/2021verifiedLow
178XXX.XXX.X.XXxxx-xxx-x-xx.xxxxxxx-xxx.xx-x.xxxXxxxxxxx04/08/2022verifiedMedium
179XXX.XXX.X.XXXxxx-xxx-x-xxx.xxxxxxx-xxx.xx-x.xxxXxxxxxxx04/08/2022verifiedMedium
180XXX.XXX.XXX.XXXxxxxxx.xxx.xxXxxxxxxx10/09/2021verifiedLow
181XXX.XX.XX.XXXxxxxxxx04/08/2022verifiedMedium

TTP - Tactics, Techniques, Procedures (14)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueClassVulnerabilitiesAccess VectorTypeConfidence
1T1006CAPEC-126CWE-22Path TraversalpredictiveHigh
2T1055CAPEC-10CWE-74Improper Neutralization of Data within XPath ExpressionspredictiveHigh
3T1059CAPEC-242CWE-94Argument InjectionpredictiveHigh
4TXXXX.XXXCAPEC-XXXCWE-XX, CWE-XXXxxxx Xxxxx Xxxx XxxxxxxxxpredictiveHigh
5TXXXXCAPEC-XXXCWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHigh
6TXXXXCAPEC-XXXCWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveHigh
7TXXXX.XXXCAPEC-XXXCWE-XXXXxxx XxxxxxxxpredictiveHigh
8TXXXXCWE-XXX7xx Xxxxxxxx XxxxxxxxpredictiveHigh
9TXXXXCWE-XXXXxxxxxxxxx XxxxxxpredictiveHigh
10TXXXXCAPEC-XXXCWE-XX, CWE-XXXxx XxxxxxxxxpredictiveHigh
11TXXXX.XXXCAPEC-XXXCWE-XXXXxxxxxxxpredictiveHigh
12TXXXXCAPEC-XXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHigh
13TXXXXCAPEC-XXXCWE-XXX, CWE-XXXXxxxxxxxxxxxx XxxxxxpredictiveHigh
14TXXXX.XXXCAPEC-XCWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveHigh

IOA - Indicator of Attack (250)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/admin/create_product.phppredictiveHigh
2File/admin/general.cgipredictiveHigh
3File/admin/reminders/manage_reminder.phppredictiveHigh
4File/API/infopredictiveMedium
5File/backend/admin/his_admin_add_lab_equipment.phppredictiveHigh
6File/CCMAdmin/serverlist.asppredictiveHigh
7File/cgi/get_param.cgipredictiveHigh
8File/csms/admin/inquiries/view_details.phppredictiveHigh
9File/cstecgi.cgipredictiveMedium
10File/ecommerce/support_ticketpredictiveHigh
11File/forum/away.phppredictiveHigh
12File/home/searchpredictiveMedium
13File/include/chart_generator.phppredictiveHigh
14File/librarian/bookdetails.phppredictiveHigh
15File/messageboard/view.phppredictiveHigh
16File/out.phppredictiveMedium
17File/owa/auth/logon.aspxpredictiveHigh
18File/spip.phppredictiveMedium
19File/SVFE2/pages/feegroups/country_group.jsfpredictiveHigh
20File/textpattern/index.phppredictiveHigh
21File/upfile.cgipredictiveMedium
22File/webui/modules/log/operate.mdspredictiveHigh
23File/wordpress/wp-admin/admin.phppredictiveHigh
24Fileaccount_footer.phppredictiveHigh
25Fileadclick.phppredictiveMedium
26Fileadd_edit_cat.asppredictiveHigh
27Fileadd_edit_user.asppredictiveHigh
28Fileadmin.cropcanvas.phppredictiveHigh
29Fileadmin/editusertag.phppredictiveHigh
30Fileadmin/edit_category.phppredictiveHigh
31Filexxxxx/xx_xxxx.xxxpredictiveHigh
32Filexxxxx/xxxxx.xxxpredictiveHigh
33Filexxxxx/xxxxxx.xxxpredictiveHigh
34Filexxxxxxxxxxxxxxxx.xxxpredictiveHigh
35Filexxxxxxxxxxx.xxxpredictiveHigh
36Filexxxxxxxxxxx.xxxpredictiveHigh
37Filexxxx_xxxx_xxxxxxxx.xxxpredictiveHigh
38Filexx_xxxxxxxxxx.xxxpredictiveHigh
39Filexxx/xxxxxx/xxxx_xxxxxx.xxxpredictiveHigh
40Filexxxxxxxx.xxxxxxx.xxxpredictiveHigh
41Filexx_xxxxx_xxxxx.xxxpredictiveHigh
42Filexx_xxxx.xxxpredictiveMedium
43Filexxx_xxxxxxxxx.xxxpredictiveHigh
44Filex:\xxxxpredictiveLow
45Filexxxxxx/xxxxx/xxxxx.xxxpredictiveHigh
46Filexxxx_xxxxxxx.xxxpredictiveHigh
47Filexxxxxxxx.xxxpredictiveMedium
48Filexxx-xxx/xxxxxxxxxxxx.xxxpredictiveHigh
49Filexxxxxxxxxxx.xxxpredictiveHigh
50Filexxxxx.xxxxx.xxxpredictiveHigh
51Filexxxxx/xxxxx_xxxxxx.xxxpredictiveHigh
52Filexxxxxxxxxx_xxxxx.xxxpredictiveHigh
53Filexxxxx_xx_xxxxxxxxx.xxxpredictiveHigh
54Filexxxxx_xxxx.xxxpredictiveHigh
55Filexxx.xxx?xxx=xxxxx_xxxxpredictiveHigh
56Filexxxxxxxx_xxxxxxxxxxxxxxxxx.xxxpredictiveHigh
57Filexxxxxxxxxx.xxxpredictiveHigh
58Filexxxxxxxxx.xxxpredictiveHigh
59Filexxxxxxx.xxxpredictiveMedium
60Filexxxxxx.xxxpredictiveMedium
61Filexxxxxx.xxxpredictiveMedium
62Filexxxxxxxx.xxxpredictiveMedium
63Filexxxxxxx/xxxxx/xxxxx.xpredictiveHigh
64Filexxxxx.xxxpredictiveMedium
65Filexxxxx.xxxpredictiveMedium
66Filexxxx.xxxpredictiveMedium
67Filexxxxxxxx.xxxpredictiveMedium
68Filexxxxxxxx.xxxpredictiveMedium
69Filexxxxxxxxx.xxxpredictiveHigh
70Filexxxxxx.xxxxpredictiveMedium
71Filexxxx.xxxpredictiveMedium
72Filexxxx.xxxpredictiveMedium
73Filexxxxxxxxxx.xxxpredictiveHigh
74Filexxxxx_xxxxxx.xxxpredictiveHigh
75Filexxxxxxxxx.xxxpredictiveHigh
76Filexxx/xxxxxxxx.xxxpredictiveHigh
77Filexxx/xxxxxx.xxxpredictiveHigh
78Filexxx/xxxxxxx/xxxxxxxxxxxx.xxxpredictiveHigh
79Filexxxxxxx.xxxpredictiveMedium
80Filexxxxxxx/xxxx.xxxpredictiveHigh
81Filexxxxxxxx/xxxx.xxxpredictiveHigh
82Filexxxxx.xxxpredictiveMedium
83Filexxxx.xxxxpredictiveMedium
84Filexxxxxxxxxxxxx.xxxpredictiveHigh
85Filexxxxxxxx/xxxxxxxx_xxxxxxx_xxxxxx/xxxxx.xxxpredictiveHigh
86Filexxxx_xxxx.xxxpredictiveHigh
87Filexxx.xxxxpredictiveMedium
88Filexxxxxx.xxxpredictiveMedium
89Filexxxxx.xxxxpredictiveMedium
90Filexxxxx.xxxpredictiveMedium
91Filexxxxx.xxxxpredictiveMedium
92Filexxxxx_xxxxxxx.xxxpredictiveHigh
93Filexxx_xxxxxxxx.xxxpredictiveHigh
94Filexxx/xxxx_xxx.xxxpredictiveHigh
95Filexxxxxxx/xxx.xxxpredictiveHigh
96Filexxx.xxxpredictiveLow
97Filexxxxxx_xx.xxxpredictiveHigh
98Filexxx/xxxxx.xxxxpredictiveHigh
99Filex-xxxx.xxxpredictiveMedium
100Filexxxx.xxxxxxxxx.xxxpredictiveHigh
101Filexxxxxxxxx.xxx.xxxpredictiveHigh
102Filexxxxxx.xxxpredictiveMedium
103Filexxxx.xxxpredictiveMedium
104Filexxxx.xxxpredictiveMedium
105Filexxxxxxxxx/xxxxxxxxxxxxxx.xxxxpredictiveHigh
106Filexxxxx.xxxpredictiveMedium
107Filexxxxx.xxxpredictiveMedium
108Filexxxxxxxx.xxxpredictiveMedium
109Filexxxxxxxxxx.xxxpredictiveHigh
110Filexxxxxxxx.xxxpredictiveMedium
111Filexxxxxxxx.xxxpredictiveMedium
112Filexxxxxxxxxxxx_xxxxxxxx.xxx.xxxpredictiveHigh
113Filexxxxxx.xxxpredictiveMedium
114Filexxxx_xxxx_xxxxxx.xxxpredictiveHigh
115Filexxxxxx.xxxpredictiveMedium
116Filexxxxxx.xxxpredictiveMedium
117Filexxxx/xxxxxxx/xxxxxxxxxxxxx_xxx.xxxpredictiveHigh
118Filexxxx.xxxpredictiveMedium
119Filexxxx_xxxxxxx_xxxxxxxx.xxxpredictiveHigh
120Filexxxxxxxx.xxx/xxxxxx.xxx/xxxxxxxx.xxxpredictiveHigh
121Filexxxxxxxxxxx.xxxpredictiveHigh
122Filexxx/xxx/xxxxxxx/xxxx.xxxpredictiveHigh
123Filexxxxx_xxxxx.xxxpredictiveHigh
124Filexxxxxx_xxxx/xxxxx.xxxpredictiveHigh
125Filexxxx-xxxxx.xxxpredictiveHigh
126Filexxxx-xxxxxxxx.xxxpredictiveHigh
127Filexxxxxxxxxxxxxx.xpredictiveHigh
128Filexxxxx.xxxpredictiveMedium
129Filexxxxxx.xxxpredictiveMedium
130Filexxx.xxxpredictiveLow
131Filexxxx.xxxpredictiveMedium
132Filexxxxx-xxxxxxxx-xxxxx-xxxxxxxxxxx-xxx-xxxxx.xxxpredictiveHigh
133Filexxxxx.xxxxpredictiveMedium
134Filexxxxxxxxx.xxxxpredictiveHigh
135Filexxxxxxx/xxxxxxxxx/xxxxxxxxxxxx.xxxpredictiveHigh
136Filexxxxxxx.xxxpredictiveMedium
137Filexx.xxxpredictiveLow
138Filexxxxxxxxxxxx.xxxpredictiveHigh
139File~/xxxxx-xxxxx.xxxpredictiveHigh
140Libraryxxxxxx[xxxxxx_xxxxpredictiveHigh
141Libraryxxxx/xxxxxxx/xxxx/xxxxxxxxx/xxxxx.xxxpredictiveHigh
142Library~/xxx/xxxxx-xxxxxxxx-xxxxxxxxxx.xxxpredictiveHigh
143Argumentxxx_xxxxpredictiveMedium
144Argumentxx_xxpredictiveLow
145ArgumentxxxxxxpredictiveLow
146Argumentxxx_xxpredictiveLow
147ArgumentxxpredictiveLow
148ArgumentxxpredictiveLow
149ArgumentxxxxxxxxpredictiveMedium
150ArgumentxxxxxxxxpredictiveMedium
151ArgumentxxxxxpredictiveLow
152ArgumentxxxxpredictiveLow
153Argumentxxxx_xxx_xxxxpredictiveHigh
154ArgumentxxxpredictiveLow
155Argumentxxxxxxxx_xxxxpredictiveHigh
156Argumentxxx_xxpredictiveLow
157Argumentxx_xxxxxxpredictiveMedium
158ArgumentxxxxpredictiveLow
159Argumentxxxx_xxpredictiveLow
160ArgumentxxxxxxxxxxpredictiveMedium
161Argumentxxxxxx[xxxxxx_xxxx]predictiveHigh
162Argumentxxxx_xxpredictiveLow
163ArgumentxxxxxxxxxxxxpredictiveMedium
164ArgumentxxxxxxxxpredictiveMedium
165ArgumentxxxxpredictiveLow
166ArgumentxxxxxxxpredictiveLow
167Argumentxxxxx_xxxx_xxxxpredictiveHigh
168Argumentxxx_xxxx/xxx_xxxx/xxx_xxxxxx/xxx_xxxx/xxx_xxxx/xxx_xxxxxx/xxx_xxxpredictiveHigh
169Argumentxxxxxxx=xxxxxxxxpredictiveHigh
170ArgumentxxxxxxxpredictiveLow
171Argumentxxxxxxx_xxxxxxxpredictiveHigh
172Argumentxxxxxxxxxxxxxx[xxxxxxxxxxxxxxxxxx]predictiveHigh
173ArgumentxxxxxxxxpredictiveMedium
174ArgumentxxxxpredictiveLow
175ArgumentxxpredictiveLow
176Argumentxx/xx_xxxxxx_xxxx/xx_xxxx_xxxxxxpredictiveHigh
177ArgumentxxxxxxxxxpredictiveMedium
178Argumentxx_xxxxxpredictiveMedium
179ArgumentxxxxxpredictiveLow
180ArgumentxxxxxxpredictiveLow
181Argumentxxxx_xxpredictiveLow
182ArgumentxxxxpredictiveLow
183Argumentxxxxxxxx_xxxpredictiveMedium
184Argumentxxx_xxxpredictiveLow
185ArgumentxxxxxxxpredictiveLow
186ArgumentxxxpredictiveLow
187Argumentxxx_xxxx_xxxxpredictiveHigh
188ArgumentxxxpredictiveLow
189Argumentxx_xxxxpredictiveLow
190Argumentxxx/xxxxxxxxxpredictiveHigh
191Argumentxxxxxxxxx[xxxxxxxxx][]predictiveHigh
192Argumentxxxxxxxxx_xxxxxxxx_xxxxpredictiveHigh
193ArgumentxxxxxpredictiveLow
194Argumentxxxxxxx_xxxxpredictiveMedium
195ArgumentxxxxpredictiveLow
196ArgumentxxxxpredictiveLow
197Argumentxxxx/xxxxxxxx/xxx/xxx/xxxxxxxx/xxxxxxxpredictiveHigh
198Argumentxxxxxxx_xxpredictiveMedium
199ArgumentxxxxpredictiveLow
200Argumentxxx_xxx[]predictiveMedium
201ArgumentxxxxxxxxpredictiveMedium
202Argumentxxxx_xx_xx_xxxpredictiveHigh
203ArgumentxxxxxxxpredictiveLow
204ArgumentxxxxxxxxxxxxxpredictiveHigh
205ArgumentxxxxxxxxxpredictiveMedium
206Argumentxxxxx_xxxx_xxxxpredictiveHigh
207ArgumentxxxxxxxxxxxxpredictiveMedium
208ArgumentxxxxxpredictiveLow
209ArgumentxxxxxxxpredictiveLow
210Argumentxx_xxxxpredictiveLow
211Argumentxx_xxxxpredictiveLow
212ArgumentxxxxxxpredictiveLow
213ArgumentxxxxxxxxpredictiveMedium
214ArgumentxxxxxpredictiveLow
215Argumentxxxxxxx_xxpredictiveMedium
216ArgumentxxxpredictiveLow
217Argumentxxxxxx_xxxxxxpredictiveHigh
218ArgumentxxxpredictiveLow
219Argumentxxxxxx_xxxpredictiveMedium
220Argumentxxxx_xxxxpredictiveMedium
221ArgumentxxxxxxxpredictiveLow
222Argumentxxxxxx_xxpredictiveMedium
223Argumentxxxxxxx_xxpredictiveMedium
224ArgumentxxxxxxpredictiveLow
225Argumentxx_xxxxx_xxxx_xxxxpredictiveHigh
226ArgumentxxpredictiveLow
227ArgumentxxxxxxxxxpredictiveMedium
228Argumentxxxxx_xxxxpredictiveMedium
229ArgumentxxxxxxxpredictiveLow
230Argumentxxxxxx xxxx/xxxxxx xxxxx xxxxpredictiveHigh
231ArgumentxxxxxxxxxxpredictiveMedium
232Argumentxxxxxxxxxx_xxpredictiveHigh
233ArgumentxxxxpredictiveLow
234Argumentxxxx_xxpredictiveLow
235ArgumentxxxpredictiveLow
236ArgumentxxxpredictiveLow
237Argumentxxxx.xxxxxpredictiveMedium
238Argumentxxxxxxxx:x_xxxx/xxxxxxxx:x_xxxx/xxxxxxxx:x_xxxxpredictiveHigh
239ArgumentxxxxxxpredictiveLow
240ArgumentxxxxxxxxpredictiveMedium
241Argumentxxxx_xxpredictiveLow
242Argumentxx_xxxxpredictiveLow
243Input Value' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxxpredictiveHigh
244Input Value..predictiveLow
245Input Valuex%xxxxxxx%xxxxxxxx%xxx,xxxxxx_xx%xxxxxx,xx_xxxxxxx,xxxxxxxx%xx,x,x,x,x,x,x,x,xx,xx,xx,xx,xx,xx,xx,xx,xx%xxxxxx%xxxxxxxxxx%xxxxxxx%xxxx%xxxpredictiveHigh
246Input Value<xxx%xxxxx='xxxx://xxx.xxxx.xx/xxxx.xxx'%xxxxxxx='xxxxxx:%xxxxx%xxxxxxx%xxxxxxx;'>predictiveHigh
247Input Value<xxxxxx>xxxxx(x)</xxxxxx>predictiveHigh
248Input Value\xxx../../../../xxx/xxxxxxpredictiveHigh
249Patternxxxxxxx-xxxx|xx| xxxx/xxxxpredictiveHigh
250Patternxxxx /xpredictiveLow

References (21)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

This view requires CTI permissions

Just purchase a CTI license today!