GandCrab Analysis

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en918
de16
it14
es14
fr12

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Microsoft Windows10
Pearlinger Products6
Microhard Bullet-LTE4
MercuryBoard Message Board4
Vmware Workspace ONE Access4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemEPSSCTICVE
1LogicBoard CMS away.php redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable0.000002.62
2DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.009430.82CVE-2010-0966
3FLDS redir.php sql injection7.37.3$0-$5k$0-$5kHighUnavailable0.002030.43CVE-2008-5928
4Bitrix Site Manager redirect.php link following5.34.7$0-$5k$0-$5kUnprovenUnavailable0.001130.04CVE-2008-2052
5Tiki Admin Password tiki-login.php improper authentication8.07.7$0-$5k$0-$5kNot DefinedOfficial Fix0.009363.69CVE-2020-15906
6My Link Trader out.php sql injection6.35.7$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.17
7SAS Web Report Studio javascript: URL logonAndRender.do cross site scripting3.53.4$0-$5k$0-$5kNot DefinedNot Defined0.000890.05CVE-2022-25256
8Serendipity exit.php privileges management6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.43
9Vunet VU Web Visitor Analyst redir.asp sql injection7.37.1$0-$5k$0-$5kHighWorkaround0.001190.04CVE-2010-2338
10OpenX adclick.php redirect5.34.7$0-$5k$0-$5kUnprovenUnavailable0.004400.04CVE-2014-2230
11vBulletin redirector.php6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.001060.04CVE-2018-6200
12Microsoft Windows Roaming Security Rights Management Services Remote Code Execution8.17.4$100k and more$5k-$25kUnprovenOfficial Fix0.023090.00CVE-2022-21974
13GetSimpleCMS index.php redirect6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.001230.00CVE-2019-9915
14PHPWind goto.php redirect6.36.3$0-$5k$0-$5kNot DefinedNot Defined0.003480.03CVE-2015-4134
15Atlassian Jira Service Management Server/Data Center InsightDefaultCustomFieldConfig.jspa cross site scripting3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000540.00CVE-2021-43943
16Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25kCalculatingHighWorkaround0.020160.00CVE-2007-1192
17Openads adclick.php Remote Code Execution7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.018710.03CVE-2007-2046
18Atlassian JIRA Server/Data Center Thread Contention/CPU Monitoring Service ViewInstrumentation.jspa cross-site request forgery4.34.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000740.04CVE-2021-43953
19vu Mass Mailer Login Page redir.asp sql injection7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.002710.04CVE-2007-6138
20Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation8.17.4$100k and more$5k-$25kUnprovenOfficial Fix0.000430.00CVE-2022-24507

IOC - Indicator of Compromise (181)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsIdentifiedTypeConfidence
13.64.163.50ec2-3-64-163-50.eu-central-1.compute.amazonaws.comGandCrab10/24/2021verifiedLow
23.215.23.197ec2-3-215-23-197.compute-1.amazonaws.comGandCrab05/05/2022verifiedLow
35.23.49.811241393-cn03460.tw1.ruGandCrab05/24/2019verifiedLow
45.39.221.60GandCrab07/17/2021verifiedMedium
55.135.183.146freya.stelas.deGandCrab10/24/2021verifiedMedium
65.144.168.210mail.xdeers.comGandCrab04/13/2022verifiedMedium
713.37.189.21ec2-13-37-189-21.eu-west-3.compute.amazonaws.comGandCrab02/20/2023verifiedMedium
813.76.158.123GandCrab07/17/2021verifiedMedium
913.107.21.200GandCrab04/08/2022verifiedMedium
1015.188.214.230ec2-15-188-214-230.eu-west-3.compute.amazonaws.comGandCrab02/20/2023verifiedMedium
1120.42.65.92GandCrab05/07/2022verifiedMedium
1220.42.73.29GandCrab05/07/2022verifiedMedium
1320.50.64.11GandCrab10/09/2021verifiedMedium
1420.189.173.20GandCrab05/07/2022verifiedMedium
1523.56.169.147a23-56-169-147.deploy.static.akamaitechnologies.comGandCrab02/20/2023verifiedHigh
1623.56.169.152a23-56-169-152.deploy.static.akamaitechnologies.comGandCrab02/20/2023verifiedHigh
1723.100.15.180GandCrab04/14/2022verifiedMedium
1823.205.105.157a23-205-105-157.deploy.static.akamaitechnologies.comGandCrab05/07/2022verifiedMedium
1923.221.227.165a23-221-227-165.deploy.static.akamaitechnologies.comGandCrab02/20/2023verifiedHigh
2023.221.227.172a23-221-227-172.deploy.static.akamaitechnologies.comGandCrab02/20/2023verifiedHigh
2123.236.62.147147.62.236.23.bc.googleusercontent.comGandCrab04/14/2022verifiedLow
2234.102.136.180180.136.102.34.bc.googleusercontent.comGandCrab10/09/2021verifiedLow
2335.205.61.6767.61.205.35.bc.googleusercontent.comGandCrab10/09/2021verifiedLow
2439.107.34.197GandCrab10/09/2021verifiedMedium
2545.33.91.79li1037-79.members.linode.comGandCrab04/08/2022verifiedMedium
2645.118.145.96GandCrab10/09/2021verifiedMedium
2746.32.228.22720808.vps-10.comGandCrab04/13/2022verifiedLow
2847.75.206.148GandCrab04/14/2022verifiedMedium
2950.63.202.89ip-50-63-202-89.ip.secureserver.netGandCrab04/08/2022verifiedMedium
3050.87.58.16550-87-58-165.unifiedlayer.comGandCrab04/08/2022verifiedMedium
3151.15.229.127127-229-15-51.instances.scw.cloudGandCrab02/20/2023verifiedMedium
3251.68.50.168ip168.ip-51-68-50.euGandCrab04/08/2022verifiedMedium
3351.254.25.115ip115.ip-51-254-25.euGandCrab10/24/2021verifiedMedium
3451.255.48.78vps-ede152ed.vps.ovh.netGandCrab10/24/2021verifiedLow
3552.17.9.185ec2-52-17-9-185.eu-west-1.compute.amazonaws.comGandCrab04/13/2022verifiedLow
3652.29.192.136ec2-52-29-192-136.eu-central-1.compute.amazonaws.comGandCrab04/08/2022verifiedLow
3752.58.78.16ec2-52-58-78-16.eu-central-1.compute.amazonaws.comGandCrab04/29/2022verifiedLow
38XX.XXX.XXX.XXxxxx.xxxx.xxxxxXxxxxxxx10/09/2021verifiedMedium
39XX.XXX.XXX.XXXXxxxxxxx05/07/2022verifiedMedium
40XX.XXX.XXX.XXXXxxxxxxx05/07/2022verifiedMedium
41XX.XX.XXX.XXxxxx.xx-xx-xx-xxx.xxXxxxxxxx10/09/2021verifiedMedium
42XX.XXX.XX.XXXxx-xxx-xx-xxx.xxx.xxxxxxxxxxxx.xxXxxxxxxx04/14/2022verifiedMedium
43XX.XX.XXX.XXxx.xxx.xx.xx.xxxxxx.xxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
44XX.XX.XXX.XXXxxx.xxx.xx.xx.xxxxxx.xxxxxx.xxxXxxxxxxx10/09/2021verifiedMedium
45XX.XXX.XXX.XXXxxxx.xxxxxxxxxxxxxxxxx.xxxXxxxxxxx07/15/2021verifiedMedium
46XX.XXX.XXX.XXXXxxxxxxx05/06/2022verifiedMedium
47XX.XXX.XXX.XXxxxxxxxxxxxx.xx.xxxxxxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
48XX.XX.XXX.XXXxxxxx.xxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
49XX.XXX.XXX.XXXxxxxxxxx.xxxxxxxxxxx.xxxXxxxxxxx10/09/2021verifiedMedium
50XX.XX.XXX.XXxx-xx-xxx-xx.xxxxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
51XX.XX.XX.XXXXxxxxxxx05/07/2022verifiedMedium
52XX.XX.XXX.XXxxxxxx-xxxxx.xx-xxxxxxx.xxXxxxxxxx05/07/2022verifiedLow
53XX.XXX.XXX.XXxx-xx-xxx-xxx-xx.xxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
54XX.XXX.XXX.XXXxx-xx-xxx-xxx-xxx.xxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
55XX.XXX.XXX.Xxxxxx.xxXxxxxxxx02/15/2018verifiedLow
56XX.XX.XXX.XXxxxxx.xxxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
57XX.X.XXX.XXXxxxx-xxx.xxxxxx.xxxxxxx.xxx.xxXxxxxxxx04/08/2022verifiedMedium
58XX.XXX.XX.XXXxxxxxx.xxx-xxxx.xxxXxxxxxxx04/13/2022verifiedMedium
59XX.XXX.XXX.Xxxxxxxx.xxxxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
60XX.XXX.XXX.XXxx-xxxxxx.xxxxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
61XX.XXX.XX.XXxxx.xxxx.xxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
62XX.XXX.XX.XXxxx.xxxx.xxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
63XX.XXX.XX.XXxxx.xxxxx.xxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
64XX.XXX.XX.XXXxxx.xxxxxxx.xxxxx.xxxXxxxxxxx10/09/2021verifiedMedium
65XX.XXX.XX.XXXxxx.xxxx.xxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
66XX.XXX.XX.XXXxx.xxxxx.xxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
67XX.XXX.XX.XXXxxxxxxx07/15/2021verifiedMedium
68XX.XXX.XXX.Xxxxxxxx.xxxxx.xxx.xxXxxxxxxx10/09/2021verifiedMedium
69XX.XXX.XXX.XXxxxxxxxx.xxxxx.xxx.xxXxxxxxxx04/08/2022verifiedMedium
70XX.XXX.XXX.XXxxxxxx.xxxxx.xxxxxxxxx.xxXxxxxxxx05/24/2019verifiedLow
71XX.XX.XX.XXXxxxxx.xxxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
72XX.XXX.XX.XXxxxx.xxxxxxxx.xxxXxxxxxxx10/09/2021verifiedMedium
73XX.XXX.XX.XXXxxxxx.xxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
74XX.XX.XXX.XXxxxxxx.xxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
75XX.XXX.XX.XXxxxx-xx-xxx-xx-xx.xxxxxx-xx-xxxxxx.xxXxxxxxxx04/08/2022verifiedLow
76XX.XXX.XXX.XXXxxxxxxx.xxxxxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
77XX.XX.XX.XXXxx-xx-xx-xxx.xx.xxx-xxx.xxXxxxxxxx04/08/2022verifiedMedium
78XX.XXX.XX.XXXxxxxxxxx.xxxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
79XX.XXX.XX.XXxxxx-xx-xxx-xx-xx.xxxxxx-xx-xxxxxx.xxXxxxxxxx07/21/2022verifiedMedium
80XX.XXX.XXX.XXXxxxxxxx04/08/2022verifiedMedium
81XX.XXX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
82XX.XX.XXX.XXXxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxxxxx07/15/2021verifiedMedium
83XXX.XXX.XX.XXXXxxxxxxx02/15/2018verifiedLow
84XXX.XX.XXX.XXXxxxxxxx04/08/2022verifiedMedium
85XXX.XXX.XX.XXXXxxxxxxx04/08/2022verifiedMedium
86XXX.XX.XX.XXXXxxxxxxx10/24/2021verifiedMedium
87XXX.XX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
88XXX.XX.XXX.XXXXxxxxxxx04/14/2022verifiedMedium
89XXX.XX.XXX.XXXxxxxxxx04/08/2022verifiedMedium
90XXX.XX.XXX.XXXXxxxxxxx04/14/2022verifiedMedium
91XXX.XX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
92XXX.XX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
93XXX.XX.XX.XXXXxxxxxxx04/08/2022verifiedMedium
94XXX.XX.XX.XXXXxxxxxxx04/08/2022verifiedMedium
95XXX.XX.XX.XXXXxxxxxxx04/14/2022verifiedMedium
96XXX.XX.XX.XXXXxxxxxxx04/13/2022verifiedMedium
97XXX.XX.XX.XXXXxxxxxxx04/14/2022verifiedMedium
98XXX.XX.XX.XXXxxxxxxx04/08/2022verifiedMedium
99XXX.XXX.XX.XXXxxxxxxx05/07/2022verifiedMedium
100XXX.XXX.XXX.XXXxx.xxxx.xxxxxxx.xx.xxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
101XXX.XX.XXX.XXXxx-xxx.xxxxxxxxx.xxXxxxxxxx05/06/2022verifiedMedium
102XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
103XXX.XX.XXX.XXXXxxxxxxx02/15/2018verifiedLow
104XXX.XX.XXX.XXXxxxxxxx03/31/2022verifiedMedium
105XXX.XXX.XX.XXxxxxxxx.xxxXxxxxxxx10/24/2021verifiedMedium
106XXX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
107XXX.XXX.XXX.XXXxxxxxx.xxxx-xxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
108XXX.XX.XXX.XXxxxx.xx-xxx-xx-xxx.xxXxxxxxxx04/08/2022verifiedMedium
109XXX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
110XXX.XX.XXX.XXXXxxxxxxx10/24/2021verifiedMedium
111XXX.XX.X.XXXXxxxxxxx04/14/2022verifiedMedium
112XXX.XX.XXX.XXxxxxxx.xx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx10/24/2021verifiedMedium
113XXX.XX.XX.XXxx-xxx-xx-xx-xx.xxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
114XXX.XXX.XXX.XXXxxxxxxx10/09/2021verifiedMedium
115XXX.XX.XXX.XXXxxxx.xxxxxx.xxxXxxxxxxx04/14/2022verifiedMedium
116XXX.XXX.X.XXxxxx.xxxx.xxxXxxxxxxx04/13/2022verifiedMedium
117XXX.XXX.X.XXxxxx.xxxx.xxxXxxxxxxx04/13/2022verifiedMedium
118XXX.XXX.XXX.XXxxx-xxx-xxx-xx.xxx.xxx.xxxxxxxxxxxx.xxXxxxxxxx03/31/2022verifiedLow
119XXX.XX.XXX.XXXxxxxxxx04/08/2022verifiedMedium
120XXX.XXX.XXX.XXXXxxxxxxx10/09/2021verifiedMedium
121XXX.XX.XX.XXXxxx.xx.xx.xxx.xxxxxxxxx.xxxXxxxxxxx10/24/2021verifiedMedium
122XXX.XX.XX.XXXxxx.xx.xx.xxx.xxxxxxxxx.xxxXxxxxxxx10/24/2021verifiedMedium
123XXX.XXX.XXX.XXXxxxxxx.xxxxx.xxXxxxxxxx10/24/2021verifiedMedium
124XXX.XXX.XX.XXXXxxxxxxx10/09/2021verifiedMedium
125XXX.XX.XX.XXXXxxxxxxx07/17/2021verifiedMedium
126XXX.XXX.XXX.XXXxxxxxx.xxxxx.xxxxxxXxxxxxxx04/08/2022verifiedMedium
127XXX.XX.XXX.XXXxxxxxxxx.xx-xxx-xx-xxx.xxXxxxxxxx04/08/2022verifiedMedium
128XXX.XXX.XX.XXXxxxxxx.xxxxxxx.xxXxxxxxxx10/24/2021verifiedMedium
129XXX.XXX.XX.XXXxxxxx.xxxxxx.xxXxxxxxxx04/08/2022verifiedMedium
130XXX.XXX.XX.XXXxxxxx.xxxxxx.xxXxxxxxxx10/09/2021verifiedMedium
131XXX.XXX.XX.XXxxxxxx.xxxxxxx.xxx.xxXxxxxxxx04/08/2022verifiedMedium
132XXX.XX.XXX.XXxxxxxxxxxxxx.xxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
133XXX.XX.XXX.XXXXxxxxxxx04/13/2022verifiedMedium
134XXX.XX.XXX.Xxxxx.xxx.xxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
135XXX.XXX.XXX.XXXxxxxxxx10/24/2021verifiedMedium
136XXX.XXX.XXX.XXXxxxxxx.xxxxx.xxXxxxxxxx10/24/2021verifiedMedium
137XXX.XXX.XX.XXXxxxxxx.xx.xxXxxxxxxx04/08/2022verifiedMedium
138XXX.XXX.XX.XXXxxxxxxxxxx.xx.xxxxxxx.xxxXxxxxxxx10/09/2021verifiedMedium
139XXX.XXX.XX.XXXxxxxxxxxxx.xx.xxxxxxx.xxxXxxxxxxx10/09/2021verifiedMedium
140XXX.XXX.XXX.XXXxxxxxxx04/08/2022verifiedMedium
141XXX.XXX.XXX.XXxxxxxx.xxxxxxx.xxx.xxXxxxxxxx04/14/2022verifiedMedium
142XXX.XXX.XXX.XXXxxxxxx.xxxxxxx.xxx.xxXxxxxxxx04/08/2022verifiedMedium
143XXX.XXX.XXX.XXXxxxxxxx10/09/2021verifiedMedium
144XXX.XX.XXX.XXxxxxx.xxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
145XXX.XXX.XX.XXXxxx.xxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
146XXX.XXX.XX.XXXxxxxxxxxxx.xxxxxxx.xxx.xxxXxxxxxxx04/08/2022verifiedLow
147XXX.XX.XXX.XXXxxxxxxx07/15/2021verifiedMedium
148XXX.XX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
149XXX.XXX.XX.XXxxxxxx.xxxxxxx.xxx.xxXxxxxxxx04/08/2022verifiedMedium
150XXX.XX.XXX.XXxxxx.xxxxxxxxxxx.xxxXxxxxxxx05/06/2022verifiedMedium
151XXX.XX.XXX.XXxxxx-xxxxxx-xx-xxxxxxxxx-xx.xxxxx.xxXxxxxxxx10/24/2021verifiedMedium
152XXX.XX.XXX.XXxxxx-xxxxxx-xx-xxxxxxxxx-xx.xxxxx.xxXxxxxxxx04/13/2022verifiedMedium
153XXX.XXX.XXX.XXxxx-xxx-xxx-xx.xxxxxxxxxxxx.xxxXxxxxxxx04/08/2022verifiedMedium
154XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xxxxxxxxxxxx.xxxXxxxxxxx05/06/2022verifiedMedium
155XXX.XXX.XXX.XXXxxxxx.xxxxxxxxxxxxxx.xxxXxxxxxxx04/13/2022verifiedMedium
156XXX.X.XXX.XXXxxxxxxxxx.xxx-xxxx.xxXxxxxxxx04/08/2022verifiedMedium
157XXX.XXX.XX.XXXxxxxxxx10/24/2021verifiedMedium
158XXX.XXX.XXX.XXxxxxxxx04/13/2022verifiedMedium
159XXX.XXX.XX.XXXxxxxx.xxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
160XXX.XX.XXX.XXXxxxxxxx04/13/2022verifiedMedium
161XXX.XX.XXX.XXXxxxxxxx04/13/2022verifiedMedium
162XXX.XX.XX.XXXxxxxxxx04/08/2022verifiedMedium
163XXX.XXX.XXX.XXxxxxxxx-xxxxx.xx.xxXxxxxxxx04/08/2022verifiedMedium
164XXX.XXX.XXX.XXXxxx.xxxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
165XXX.XXX.XXX.XXXxxxxxxxxx.xxx-xxxxxxx.xxxXxxxxxxx04/14/2022verifiedLow
166XXX.XX.XX.XXXxxxxx-xxxxx-xx.xxxxxxxxxxxxx.xxxXxxxxxxx10/09/2021verifiedVery Low
167XXX.XX.XX.XXXxxxxxxx04/29/2022verifiedMedium
168XXX.XX.XXX.XXXx-xxxx.x-xxxxxx.xxxXxxxxxxx07/17/2021verifiedMedium
169XXX.XX.XX.XXXxxx-xx-xx-xxx.xxx.xxxxxxxxxxx.xxxXxxxxxxx10/09/2021verifiedMedium
170XXX.XXX.XXX.XXXXxxxxxxx04/08/2022verifiedMedium
171XXX.XXX.XX.Xxxxxxxxxxx.xxx.xxxXxxxxxxx10/09/2021verifiedMedium
172XXX.XXX.XX.Xxxxxxxxx.xxx.xxxXxxxxxxx10/09/2021verifiedMedium
173XXX.XXX.XX.XXXxxxx-xxx-xx.xxxxxxxxxx.xxxxxxx.xxx.xxxXxxxxxxx04/08/2022verifiedLow
174XXX.XXX.XXX.XXXxxx.xxx.xxx.xxx.xxxxxx.xxxxxx.xxxXxxxxxxx10/24/2021verifiedMedium
175XXX.XX.XX.XXxxxx.xxx.xxxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
176XXX.XX.XX.XXXxxxxx.xxx.xxxxxxxxx.xxXxxxxxxx04/13/2022verifiedMedium
177XXX.XX.XXX.XXxxxxxxxx.xxx.xxxxx.xxxXxxxxxxx10/09/2021verifiedMedium
178XXX.XXX.X.XXxxx-xxx-x-xx.xxxxxxx-xxx.xx-x.xxxXxxxxxxx04/08/2022verifiedMedium
179XXX.XXX.X.XXXxxx-xxx-x-xxx.xxxxxxx-xxx.xx-x.xxxXxxxxxxx04/08/2022verifiedMedium
180XXX.XXX.XXX.XXXxxxxxx.xxx.xxXxxxxxxx10/09/2021verifiedMedium
181XXX.XX.XX.XXXxxxxxxx04/08/2022verifiedMedium

TTP - Tactics, Techniques, Procedures (20)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (304)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/admin/general.cgipredictiveHigh
2File/admin/reminders/manage_reminder.phppredictiveHigh
3File/API/infopredictiveMedium
4File/CCMAdmin/serverlist.asppredictiveHigh
5File/cgi/get_param.cgipredictiveHigh
6File/csms/admin/inquiries/view_details.phppredictiveHigh
7File/cstecgi.cgipredictiveMedium
8File/files.md5predictiveMedium
9File/forum/away.phppredictiveHigh
10File/home/searchpredictiveMedium
11File/hrm/employeeview.phppredictiveHigh
12File/images/predictiveMedium
13File/include/chart_generator.phppredictiveHigh
14File/librarian/bookdetails.phppredictiveHigh
15File/loginpredictiveLow
16File/messageboard/view.phppredictiveHigh
17File/modules/profile/index.phppredictiveHigh
18File/one_church/userregister.phppredictiveHigh
19File/out.phppredictiveMedium
20File/owa/auth/logon.aspxpredictiveHigh
21File/public/plugins/predictiveHigh
22File/SAP_Information_System/controllers/add_admin.phppredictiveHigh
23File/SASWebReportStudio/logonAndRender.dopredictiveHigh
24File/secure/admin/InsightDefaultCustomFieldConfig.jspapredictiveHigh
25File/secure/admin/ViewInstrumentation.jspapredictiveHigh
26File/SVFE2/pages/feegroups/country_group.jsfpredictiveHigh
27File/textpattern/index.phppredictiveHigh
28File/upfile.cgipredictiveMedium
29File/v2/quantum/save-data-upload-big-filepredictiveHigh
30File/wordpress/wp-admin/admin.phppredictiveHigh
31File4.edu.phppredictiveMedium
32Fileaccount_footer.phppredictiveHigh
33Fileadclick.phppredictiveMedium
34Fileadd_edit_cat.asppredictiveHigh
35Fileadd_edit_user.asppredictiveHigh
36Fileadmin.cropcanvas.phppredictiveHigh
37Fileadmin.jcomments.phppredictiveHigh
38Filexxxxx/xxxxxxxxxxx.xxxpredictiveHigh
39Filexxxxx/xxxx_xxxxxxxx.xxxpredictiveHigh
40Filexxxxx/xxxxx.xxxpredictiveHigh
41Filexxxxx/xxxxxxxxxxxxx.xxxpredictiveHigh
42Filexxxxxxxxxxxxxxxx.xxxpredictiveHigh
43Filexxxxxxxxxxx.xxxpredictiveHigh
44Filexxxxxxxxxxx.xxxpredictiveHigh
45Filexxxx_xxxx_xxxxxxxx.xxxpredictiveHigh
46Filexx_xxxxxxxxxx.xxxpredictiveHigh
47Filexxx/xxxxxx/xxxx_xxxxxx.xxxpredictiveHigh
48Filexxxxxxxxxxxxxx.xxxpredictiveHigh
49Filexxxxxxxx.xxxxxxx.xxxpredictiveHigh
50Filexx_xxxxx_xxxxx.xxxpredictiveHigh
51Filexx_xxxx.xxxpredictiveMedium
52Filexxx_xxxxxxxxx.xxxpredictiveHigh
53Filex:\xxxxpredictiveLow
54Filexxxxxx/xxxxx/xxxxx.xxxpredictiveHigh
55Filexxxx_xxxxxxx.xxxpredictiveHigh
56Filexxxxxxxx.xxxpredictiveMedium
57Filexxxxxxxx.xxxpredictiveMedium
58Filexxx-xxx/xxxxxxxxxxxx.xxxpredictiveHigh
59Filexxx-xxx/xxx/xxxxxxxx_xxx.xxxpredictiveHigh
60Filexxxxxxxxxxx.xxxpredictiveHigh
61Filexxxxx.xxxxx.xxxpredictiveHigh
62Filexxxxx/xxxxx_xxxxxx.xxxpredictiveHigh
63Filexxxxxxxxxx_xxxxx.xxxpredictiveHigh
64Filexxxxx_xx_xxxxxxxxx.xxxpredictiveHigh
65Filexxxxx_xxxx.xxxpredictiveHigh
66Filexxxxx.xxxpredictiveMedium
67Filexxx.xxx?xxx=xxxxx_xxxxpredictiveHigh
68Filexxxxxxxx_xxxxxxxxxxxxxxxxx.xxxpredictiveHigh
69Filexxxxxxx.xxxpredictiveMedium
70Filexxxxxxxxxx.xxxpredictiveHigh
71Filexxxxxxxxxxxxxxxxxxx.xxpredictiveHigh
72Filexxxxxxxxx.xxxpredictiveHigh
73Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
74Filexx.xxxpredictiveLow
75Filexxxxxxx.xxxpredictiveMedium
76Filexxxxxx.xxxpredictiveMedium
77Filexxxxxx.xxxpredictiveMedium
78Filexxxxxxxx.xxxpredictiveMedium
79Filexxxxxxxxxx-xxxxxxxxxxxxx.xxxpredictiveHigh
80Filexxxxxxx/xxxxx/xxxxx.xpredictiveHigh
81Filexxxxx.xxxpredictiveMedium
82Filexxxxx.xxxpredictiveMedium
83Filexxxx.xxxpredictiveMedium
84Filexxxxxxxx.xxxpredictiveMedium
85Filexxxxxxxx.xxxpredictiveMedium
86Filexxxxxxxxx.xxxpredictiveHigh
87Filexxxxxx.xxxxpredictiveMedium
88Filexxxx.xxxpredictiveMedium
89Filexxxx.xxxpredictiveMedium
90Filexxxxxxxxxx.xxxpredictiveHigh
91Filexxxxx_xxxxxx.xxxpredictiveHigh
92Filexxxxxxxxx.xxxpredictiveHigh
93Filexxx/xxxxxxxx.xxxpredictiveHigh
94Filexxx/xxxxxx.xxxpredictiveHigh
95Filexxx/xxxxxxxxxxx/xxxxxxx.xxxpredictiveHigh
96Filexxx/xxxxxxx/xxxxxxxxxxxx.xxxpredictiveHigh
97Filexxxxxxx.xxxpredictiveMedium
98Filexxxxxxx/xxxx.xxxpredictiveHigh
99Filexxxxxxxx/xxxx.xxxpredictiveHigh
100Filexxxxx.xxxpredictiveMedium
101Filexxxx.xxxxpredictiveMedium
102Filexxxxxxxxxxxxx.xxxpredictiveHigh
103Filexxxxxx/xxxx/xxxxxx_xxx.xxxpredictiveHigh
104Filexxxxxxxx/xxxxxxxx_xxxxxxx_xxxxxx/xxxxx.xxxpredictiveHigh
105Filexxxx_xxxx.xxxpredictiveHigh
106Filexxx.xxxxpredictiveMedium
107Filexxxxxx/xxxxxx/xxxxxx-xx.xpredictiveHigh
108Filexxxx/xx.xxxpredictiveMedium
109Filexxxxxx.xxxpredictiveMedium
110Filexxxxx.xxxxpredictiveMedium
111Filexxxxx.xxxpredictiveMedium
112Filexxxxx.xxxxpredictiveMedium
113Filexxxxx_xxxxxxx.xxxpredictiveHigh
114Filexxx_xxxxxxxx.xxxpredictiveHigh
115Filexxx/xxxx_xxx.xxxpredictiveHigh
116Filexxxxxxx/xxx.xxxpredictiveHigh
117Filexxx/xxxxxxxxx/xx_xxx_xxxxxx.xpredictiveHigh
118Filexxx.xxxpredictiveLow
119Filexxxxxx_xx.xxxpredictiveHigh
120Filexxx/xxxxx.xxxxpredictiveHigh
121Filex-xxxx.xxxpredictiveMedium
122Filexxxx.xxxxxxxxx.xxxpredictiveHigh
123Filexxxxxxxxx.xxx.xxxpredictiveHigh
124Filexxxxxx.xxxpredictiveMedium
125Filexxxx.xxxpredictiveMedium
126Filexxxx.xxxpredictiveMedium
127Filexxxxx/xxxxxxx.xxxpredictiveHigh
128Filexxxxxxxxx/xxxxxxxxxxxxxx.xxxxpredictiveHigh
129Filexxxxx.xxxpredictiveMedium
130Filexxxxx.xxxpredictiveMedium
131Filexxxxxxxx.xxxpredictiveMedium
132Filexxxxxxxxxx.xxxpredictiveHigh
133Filexxxxxxxx.xxxpredictiveMedium
134Filexxxxxxxx.xxxpredictiveMedium
135Filexxxxxxxx_xxxxxxxxxxxx_xxxxxx.xxpredictiveHigh
136Filexxxxxxxx_xxxx.xxxpredictiveHigh
137Filexxxxxxxxxxxx_xxxxxxxx.xxx.xxxpredictiveHigh
138Filexxxxxx.xxxpredictiveMedium
139Filexxxxxxxx.xpredictiveMedium
140Filexx_xxxx.xpredictiveMedium
141Filexxxx_xxxx_xxxxxx.xxxpredictiveHigh
142Filexxxxxx.xxxpredictiveMedium
143Filexxxxxx.xxxpredictiveMedium
144Filexxxx/xxxxxxx/xxxxxxxxxxxxx_xxx.xxxpredictiveHigh
145Filexxxxxx.xxxxpredictiveMedium
146Filexxxxxxxx-xxxxxx_xxxxx.xxxpredictiveHigh
147Filexxxx.xxxpredictiveMedium
148Filexxxx_xxxxxxx_xxxxxxxx.xxxpredictiveHigh
149Filexxxxxxxx.xxx/xxxxxx.xxx/xxxxxxxx.xxxpredictiveHigh
150Filexxxxxxxxxxx.xxxpredictiveHigh
151Filexxxxxxx.xxxpredictiveMedium
152Filexxx/xxx/xxxxxxx/xxxx.xxxpredictiveHigh
153Filexxxxx_xxxxx.xxxpredictiveHigh
154Filexxxxxx_xxxx/xxxxx.xxxpredictiveHigh
155Filexxxx-xxxxx.xxxpredictiveHigh
156Filexxxx-xxxxxxxx.xxxpredictiveHigh
157Filexxxxx.xxpredictiveMedium
158Filexxxxx.xxxpredictiveMedium
159Filexxxxxx.xxxpredictiveMedium
160Filexxx.xxxpredictiveLow
161Filexxxx.xxxpredictiveMedium
162Filexxxxx-xxxxxxxx-xxxxx-xxxxxxxxxxx-xxx-xxxxx.xxxpredictiveHigh
163Filexxxx/xxx/xxxx-xxxxx.xxxpredictiveHigh
164Filexxxxx.xxxxpredictiveMedium
165Filexxxxxxxxx.xxxxpredictiveHigh
166Filexxxxxxx/xxxxxxxxx/xxxxxxxxxxxx.xxxpredictiveHigh
167Filexxxxxxx.xxxpredictiveMedium
168Filexx-xxxxx/xxxxx.xxxpredictiveHigh
169Filexx.xxxpredictiveLow
170Filexxxxxxxxxxxx.xxxpredictiveHigh
171File~/xxxxx-xxxxx.xxxpredictiveHigh
172File~/xxxxxxxx-xxxxxxxx.xxxpredictiveHigh
173Libraryxxxxxx[xxxxxx_xxxxpredictiveHigh
174Libraryxxxxxx.xxxxxxxxx.xxxxxxx.xxxxx_xxxxx.xxxpredictiveHigh
175Libraryxxxx/xxxxxxx/xxxx/xxxxxxxxx/xxxxx.xxxpredictiveHigh
176Libraryxxxxxxxx.xxxpredictiveMedium
177Library~/xxx/xxxxx-xxxxxxxx-xxxxxxxxxx.xxxpredictiveHigh
178Argument$_xxxxxxpredictiveMedium
179Argumentxxx_xxxxpredictiveMedium
180ArgumentxxxxxpredictiveLow
181Argumentxx_xxpredictiveLow
182ArgumentxxxxxxpredictiveLow
183ArgumentxxpredictiveLow
184Argumentxxx_xxpredictiveLow
185ArgumentxxpredictiveLow
186ArgumentxxpredictiveLow
187ArgumentxxxxxxxxpredictiveMedium
188ArgumentxxxxxxxxpredictiveMedium
189ArgumentxxxxxpredictiveLow
190ArgumentxxxxpredictiveLow
191Argumentxxxx_xxx_xxxxpredictiveHigh
192ArgumentxxxpredictiveLow
193ArgumentxxxxxxxxxxpredictiveMedium
194Argumentxxxxxxxx_xxxxpredictiveHigh
195Argumentxxx_xxpredictiveLow
196Argumentxx_xxxxxxpredictiveMedium
197ArgumentxxxpredictiveLow
198ArgumentxxxxpredictiveLow
199Argumentxxxx_xxpredictiveLow
200ArgumentxxxxxxxxxxpredictiveMedium
201Argumentxxxxxx[xxxxxx_xxxx]predictiveHigh
202ArgumentxxxxxxpredictiveLow
203Argumentxxxx_xxpredictiveLow
204ArgumentxxxxxxxxxxxxpredictiveMedium
205ArgumentxxxpredictiveLow
206ArgumentxxxxxxxxpredictiveMedium
207ArgumentxxxxxpredictiveLow
208ArgumentxxxxpredictiveLow
209ArgumentxxxxxxxxxxxxxxxpredictiveHigh
210Argumentxxxxx_xxxx_xxxxpredictiveHigh
211Argumentxxxxxxx=xxxxxxxxpredictiveHigh
212ArgumentxxxxpredictiveLow
213ArgumentxxxxxxxpredictiveLow
214Argumentxxxxxxx_xxxxxxxpredictiveHigh
215Argumentxxxxxxxxxxxxxx[xxxxxxxxxxxxxxxxxx]predictiveHigh
216ArgumentxxxxxxxxpredictiveMedium
217ArgumentxxxxpredictiveLow
218ArgumentxxpredictiveLow
219Argumentxx/xx_xxxxxx_xxxx/xx_xxxx_xxxxxxpredictiveHigh
220ArgumentxxxxxxxxxpredictiveMedium
221Argumentxx_xxxxxpredictiveMedium
222ArgumentxxxxxpredictiveLow
223Argumentxxxxx_xxxxpredictiveMedium
224ArgumentxxxxxxpredictiveLow
225Argumentxxxx_xxpredictiveLow
226ArgumentxxxxpredictiveLow
227Argumentxxxxxxxx_xxxpredictiveMedium
228Argumentxxx_xxxpredictiveLow
229ArgumentxxxxxxxpredictiveLow
230ArgumentxxxpredictiveLow
231ArgumentxxxxpredictiveLow
232ArgumentxxxxxxxpredictiveLow
233Argumentxxx_xxxx_xxxxpredictiveHigh
234ArgumentxxxxxxxxxxpredictiveMedium
235ArgumentxxxpredictiveLow
236Argumentxx_xxxxpredictiveLow
237Argumentxxx/xxxxxxxxxpredictiveHigh
238Argumentxxxxxxxxx_xxxxxxxx_xxxxpredictiveHigh
239ArgumentxxxxxpredictiveLow
240Argumentxxxxxxx_xxxxpredictiveMedium
241ArgumentxxxxpredictiveLow
242Argumentxxxx/xxxxxxxx/xxx/xxx/xxxxxxxx/xxxxxxxpredictiveHigh
243Argumentxxxxxxx_xxpredictiveMedium
244Argumentxxxxxx xxxxxxpredictiveHigh
245ArgumentxxxxpredictiveLow
246Argumentxxx_xxx[]predictiveMedium
247ArgumentxxxxxxxxpredictiveMedium
248Argumentxxxx_xxxxxpredictiveMedium
249Argumentxxxx_xx_xx_xxxpredictiveHigh
250ArgumentxxxxxxxpredictiveLow
251ArgumentxxxxxxxxxxxxxpredictiveHigh
252ArgumentxxxxxxxxxpredictiveMedium
253Argumentxxxxx_xxxx_xxxxpredictiveHigh
254ArgumentxxxxxxxxxxxxpredictiveMedium
255ArgumentxxxxxpredictiveLow
256ArgumentxxxxxxxpredictiveLow
257ArgumentxxxxpredictiveLow
258Argumentxx_xxxxpredictiveLow
259Argumentxx_xxxxpredictiveLow
260ArgumentxxxxxxpredictiveLow
261Argumentxxxxxxx_xxpredictiveMedium
262ArgumentxxxxxpredictiveLow
263ArgumentxxxxxxxxpredictiveMedium
264ArgumentxxxxxxxxxxpredictiveMedium
265ArgumentxxxxxpredictiveLow
266Argumentxxxxxxx_xxpredictiveMedium
267ArgumentxxxxxxxxxxpredictiveMedium
268ArgumentxxxxxxxpredictiveLow
269Argumentxxxxxx_xxxxxxx_xxxxxxxxx_xxxx/xxxxxx_xxxxxxx_xxxxxxx_xxxxpredictiveHigh
270ArgumentxxxpredictiveLow
271ArgumentxxxxxxpredictiveLow
272Argumentxxxxxx_xxxxxxpredictiveHigh
273ArgumentxxxpredictiveLow
274Argumentxxxxxx_xxxpredictiveMedium
275Argumentxxxx_xxxxpredictiveMedium
276ArgumentxxxxxxxpredictiveLow
277Argumentxxxxxx_xxpredictiveMedium
278Argumentxxxxxxx_xxpredictiveMedium
279ArgumentxxxxxxpredictiveLow
280Argumentxx_xxxxx_xxxx_xxxxpredictiveHigh
281ArgumentxxpredictiveLow
282ArgumentxxxxxxxxxpredictiveMedium
283ArgumentxxxxxxxpredictiveLow
284Argumentxxxxxx xxxx/xxxxxx xxxxx xxxxpredictiveHigh
285ArgumentxxxxxxxxxxpredictiveMedium
286Argumentx_xxpredictiveLow
287Argumentxxxxxxxxxx_xxpredictiveHigh
288ArgumentxxxxpredictiveLow
289Argumentxxxx_xxpredictiveLow
290ArgumentxxxpredictiveLow
291ArgumentxxxpredictiveLow
292Argumentxxxx.xxxxxpredictiveMedium
293Argumentxxxxxxxx:x_xxxx/xxxxxxxx:x_xxxx/xxxxxxxx:x_xxxxpredictiveHigh
294ArgumentxxxxxxpredictiveLow
295ArgumentxxxxxxxxpredictiveMedium
296Argumentxxxx_xxpredictiveLow
297Argumentxx_xxxxpredictiveLow
298Input Value' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxxpredictiveHigh
299Input Value..predictiveLow
300Input Valuex%xxxxxxx%xxxxxxxx%xxx,xxxxxx_xx%xxxxxx,xx_xxxxxxx,xxxxxxxx%xx,x,x,x,x,x,x,x,xx,xx,xx,xx,xx,xx,xx,xx,xx%xxxxxx%xxxxxxxxxx%xxxxxxx%xxxx%xxxpredictiveHigh
301Input Value<xxx%xxxxx='xxxx://xxx.xxxx.xx/xxxx.xxx'%xxxxxxx='xxxxxx:%xxxxx%xxxxxxx%xxxxxxx;'>predictiveHigh
302Input Value\xxx../../../../xxx/xxxxxxpredictiveHigh
303Patternxxxxxxx-xxxx|xx| xxxx/xxxxpredictiveHigh
304Patternxxxx /xpredictiveLow

References (21)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!