GuLoader Analysis

IOB - Indicator of Behavior (487)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en376
de24
sv20
zh16
es16

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

us282
ru44
cn26
sv20
fr6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Linux Kernel10
Qualcomm Snapdragon Auto8
Qualcomm Snapdragon Consumer IOT8
Qualcomm Snapdragon Industrial IOT8
Qualcomm Snapdragon Mobile8

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25k$0-$5kHighWorkaround0.030.01798CVE-2007-1192
2DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix1.160.00954CVE-2010-0966
3WooCommerce Stock Manager Plugin Nonce import-export.php cross-site request forgery4.34.2$0-$5k$0-$5kNot DefinedNot Defined0.000.00201CVE-2021-34619
4Promosi-web ardguest ardguest.php cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.000.00160CVE-2009-3668
5Myupb UPB cross site scripting4.34.3$0-$5k$0-$5kHighUnavailable0.000.00297CVE-2008-6727
6Microsoft Windows ATI Radeon Kernel Mode Driver denial of service6.55.7$25k-$100k$5k-$25kProof-of-ConceptUnavailable0.000.06890CVE-2007-1763
7Pligg cloud.php sql injection6.36.3$0-$5k$0-$5kNot DefinedNot Defined0.630.00000
8Oracle GlassFish Server Java Server Faces path traversal5.35.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.060.64598CVE-2013-3827
9PHPWind goto.php redirect6.36.3$0-$5k$0-$5kNot DefinedNot Defined0.200.00348CVE-2015-4134
10Schneider Electric EcoStruxure Control Expert Modbus password recovery8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.050.00170CVE-2022-37300
11Schneider Electric Andover Continuum Code Generation code injection8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.000.02329CVE-2020-7480
12Schneider Electric Andover Continuum Web Server cross site scripting5.25.2$0-$5k$0-$5kNot DefinedNot Defined0.000.00078CVE-2020-7482
13Cacti graph_templates_inputs.php sql injection7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.000.00109CVE-2017-1000031
14Bouncy Castle BC-FJA FIPS Java API denial of service5.04.9$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00043CVE-2022-45146
15BigTree CMS File Upload unrestricted upload8.58.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00331CVE-2017-7695
16Ruby WEBrick request smuggling6.56.5$0-$5k$0-$5kNot DefinedNot Defined0.030.00256CVE-2020-25613
17WEBrick Gem path traversal5.45.3$0-$5k$0-$5kNot DefinedNot Defined0.030.00044CVE-2019-11879
18eSyndicat Directory Software suggest-listing.php cross site scripting3.53.5$0-$5k$0-$5kNot DefinedNot Defined0.030.00000
19Stadtaus Guestbook Script index.php file inclusion6.55.9$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000.01143CVE-2006-2158
20TIBCO iWay Service Manager Console pathname traversal6.46.4$0-$5k$0-$5kNot DefinedNot Defined0.030.00067CVE-2022-30572

IOC - Indicator of Compromise (20)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (23)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (215)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File.htaccesspredictiveMedium
2File/admin/ajax.phppredictiveHigh
3File/admin/ajax.php?action=save_windowpredictiveHigh
4File/admin/index2.htmlpredictiveHigh
5File/cgi/get_param.cgipredictiveHigh
6File/common/download_agent_installer.phppredictiveHigh
7File/common/run_cross_report.phppredictiveHigh
8File/connectors/index.phppredictiveHigh
9File/dashboard/add-portfolio.phppredictiveHigh
10File/EXCU_SHELLpredictiveMedium
11File/forum/away.phppredictiveHigh
12File/ghost/previewpredictiveHigh
13File/goform/addressNatpredictiveHigh
14File/goform/NatStaticSettingpredictiveHigh
15File/jerry-core/ecma/base/ecma-helpers-conversion.cpredictiveHigh
16File/loginpredictiveLow
17File/opt/IBM/es/lib/libffq.cryptionjni.sopredictiveHigh
18File/opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.defpredictiveHigh
19File/php-sms/admin/?page=services/manage_servicepredictiveHigh
20File/sdm-ws-rest/preconfigurationpredictiveHigh
21File/settingspredictiveMedium
22File/uapi/docpredictiveMedium
23File/uncpath/predictiveMedium
24File/updownload/t.reportpredictiveHigh
25File/xxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxxxxxx.xxxpredictiveHigh
26File/xxxxxxxxxxx-xxxxx-xxxxxxx/xxxxx/xxxxx/xxxxx/xxxxxx-xxxxxx.xxxpredictiveHigh
27File/xx-xxxxxxx/xxxxxxx/xxxxxxxxxxx/xxxxx.xxxpredictiveHigh
28Filexxxxxxx.xxxpredictiveMedium
29Filexxx_xxxxxxx.xxxpredictiveHigh
30Filexxxxx/xxxxx.xxxpredictiveHigh
31Filexxxxx/xxxxx_xxxxx.xxxpredictiveHigh
32Filexxxxx/xxxxx.xxxpredictiveHigh
33Filexxxxx/xxxxxx.xxxpredictiveHigh
34Filexxxxxxxxxxx.xxxpredictiveHigh
35Filexxxxxx/xxxxxx.xxpredictiveHigh
36Filexxxxxxxx.xxxpredictiveMedium
37Filexxxxxxxxxxxx.xxxpredictiveHigh
38Filexxxxxxxxxxxxxxxxxxx.xxxpredictiveHigh
39Filexxxxxxxxxxxx_xx_xxxxx_xxxxxxxx.xxxpredictiveHigh
40Filexxxx_xxxxxxxxxxx.xxxpredictiveHigh
41Filexxx/xxxxx/xxxxx.xpredictiveHigh
42Filexxxxxx/xxxxx-xxx_xxxxxxxx.xxxpredictiveHigh
43Filex:\xxxxxxpredictiveMedium
44Filexxxxxxxx.xxxpredictiveMedium
45Filexxx-xxx/xxxxx/xxxxx.xxxpredictiveHigh
46Filexxxxxxxxx.xxxpredictiveHigh
47Filexxxxx.xxxpredictiveMedium
48Filexxx_xxxxxxxpredictiveMedium
49Filexxxxxx/xxxxxxx/xxxxxxxxxx_xxxxxxxx.xxxpredictiveHigh
50Filexxxxxxxxx.xxpredictiveMedium
51Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
52Filexxxxxxxxxxxxx.xxxpredictiveHigh
53Filexxxxx.xpredictiveLow
54Filexxxxx-xxxxxx/xxxxxxx/xxxxx/xxxxxxxxxxxxx/xxxxxxx/xxxx_xxxxxxx.xxxpredictiveHigh
55Filexxxxx.xxxpredictiveMedium
56Filexxxx.xxxpredictiveMedium
57Filexxxx/xxxxxxx.xpredictiveHigh
58Filexxxx_xxxxx.xpredictiveMedium
59Filexx-xxxxxxx/xxxxxxxxxxxx/xxxxxx/xxxxx.xxxxxxxxxxxx.xxxx.xxxpredictiveHigh
60Filexxxxx.xxxpredictiveMedium
61Filexxxxxxx.xxxpredictiveMedium
62Filexxxx.xxxpredictiveMedium
63Filexxxxx_xxxxxxxx.xxxpredictiveHigh
64Filexxxxx_xxxxxxxxx_xxxxxx.xxxpredictiveHigh
65Filexxxxxxxxx.xxxpredictiveHigh
66Filexxxxxxxxxxxxxxxxx.xxxxpredictiveHigh
67Filexx/xxxxxxx/xxxxxx-xxx-xx.xpredictiveHigh
68Filexxx/xxxxxx.xxxpredictiveHigh
69Filexxxxxxx/xxxxxxx/xxxxxxxx.xxx.xxxpredictiveHigh
70Filexxxxx.xxxxpredictiveMedium
71Filexxxxx.xxxpredictiveMedium
72Filexxxx.xxx.xxxpredictiveMedium
73Filexxxxxx/xxxxxx.xpredictiveHigh
74Filexxxxxxx.xxxxx/xxx_xxxxxx.xxxpredictiveHigh
75Filexxxxxxxxx/xxxxxxx/xxxx/xxxxxxxxxxxxxxxxxxxx.xxxxx.xxxpredictiveHigh
76Filexxx.xxxpredictiveLow
77Filexxxxx.xxxpredictiveMedium
78Filexxxxx.xxxpredictiveMedium
79Filexxx/xxxxpredictiveMedium
80Filexxxxxx/xxxxxx.xpredictiveHigh
81Filexxxxxx/xxxxxxx/xxxxxx_xxxxxxxx.xxxpredictiveHigh
82Filexxxx.xxxpredictiveMedium
83Filexxxxxxxxxxxxxxxx.xpredictiveHigh
84Filexxxxxx/xxxxx.xxxpredictiveHigh
85Filexxxxxxx/xxxxx.xpredictiveHigh
86Filexxxxx.xxxpredictiveMedium
87Filexxx/xxxxx.xxxxpredictiveHigh
88Filexxx/xxx/predictiveMedium
89Filexxxxx.xxxpredictiveMedium
90Filexxxxxx.xpredictiveMedium
91Filexxxxxxx/xxx/xxxxxxx/xxxxxx/xxxx-xxxxxxxxxx/<xxxxxx>/xx.xxxpredictiveHigh
92Filexxxxxxxx.xxxpredictiveMedium
93Filexxxxxxxx.xpredictiveMedium
94Filexxxxxxxx.xxxpredictiveMedium
95Filexxxxx.xpredictiveLow
96Filexxxxx.xxxpredictiveMedium
97Filexxxxx.xxxpredictiveMedium
98Filexxxxxxxxxx.xxxpredictiveHigh
99Filexxxxxxxx-x.xxpredictiveHigh
100Filexxxxxxxx.xxxpredictiveMedium
101Filexxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxxpredictiveHigh
102Filexxxxxxxx.xpredictiveMedium
103Filexx_xxxx.xpredictiveMedium
104Filexxxx_xxxxxxx.xpredictiveHigh
105Filexxxxx.xxxpredictiveMedium
106Filexxxxxxx.xxxpredictiveMedium
107Filexxx/xxxxxxx/xxx_xxx/xxxxxx/xxxxxxxxx.xpredictiveHigh
108Filexxx/xx_xxx.xpredictiveMedium
109Filexxxxxxx.xxpredictiveMedium
110Filexxxxxxx-xxxxxxx.xxxpredictiveHigh
111Filexxxxxxxx/xxxxxxx/xxxxxxx.xxxxxxxxxxxxxxxxxxxxx.xxxpredictiveHigh
112Filexxxx-xxxxxxxx.xxxpredictiveHigh
113Filexxxxxxx.xpredictiveMedium
114Filexxxxx/xxx/xxxxxxx/xxxxxx.xxxpredictiveHigh
115Filexxxxx.xxxpredictiveMedium
116Filexxxxxx.xxxpredictiveMedium
117Filexxx.xxxpredictiveLow
118Filexxxxxx.xxxpredictiveMedium
119Filexxxxxxx.xxxxpredictiveMedium
120Filexxxxxxxxxx/xxxxxxxxxx-xxxxx.xxxpredictiveHigh
121Filexxx/xx/xxxxxxx_xxxxx_xxxx_xxxx.xxpredictiveHigh
122Filexxxxx.xxxpredictiveMedium
123Filexxx/xxxxxx-xxxxxxx.xxxpredictiveHigh
124Filexx-xxxxxxxx/xxxxx-xx-xxxxxxxxx-xxxxxxx.xxxpredictiveHigh
125Filexx-xxxxxxxx/xxxxx-xx-xxxxx.xxxpredictiveHigh
126Filexx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxxpredictiveHigh
127Filexx-xxxxx.xxxpredictiveMedium
128Filexxxxxxxxxxx.xxxpredictiveHigh
129FilexxxxxxxpredictiveLow
130File~/xxx/xxxxxxxxx/xxxx/xxxx/xxxxxx.xxxpredictiveHigh
131Libraryxxxxxx.xxxpredictiveMedium
132Libraryxxxxxxxxxxxxxx.xxxpredictiveHigh
133Libraryxxx/xxxxxxxx/xxxxxxx_xxxxxxxx.xxpredictiveHigh
134Libraryxxxxxxxxx/xxxxxx_xxxxxxxxxx.xxx.xxxpredictiveHigh
135Libraryxxxxxx.xxxpredictiveMedium
136Libraryxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxxx.xpredictiveHigh
137Libraryxxxxxxxx.xxxpredictiveMedium
138Libraryxxx/xxx/xx/xxx/xxxxxx.xxxxxxxxxxx.xxpredictiveHigh
139Libraryxxx/xxx/predictiveMedium
140Libraryxxxxxxxx.xxxpredictiveMedium
141Libraryxx_xxxx.x/xxx_xxxx.x/xx_xxx.xpredictiveHigh
142Libraryxxxxxx.xxxpredictiveMedium
143Libraryxxxxx.xxxpredictiveMedium
144Argumentxxx_xxxx_xxxxxpredictiveHigh
145Argumentxx_xxxxx_xxx_xxxxpredictiveHigh
146Argumentxxxxx/xxxpredictiveMedium
147ArgumentxxxxxpredictiveLow
148ArgumentxxxxpredictiveLow
149ArgumentxxxxxxxxpredictiveMedium
150ArgumentxxxxxpredictiveLow
151ArgumentxxxpredictiveLow
152ArgumentxxxxxxxxxxpredictiveMedium
153ArgumentxxxxxpredictiveLow
154ArgumentxxxxxxxxxpredictiveMedium
155Argumentxxxxxx_xxxpredictiveMedium
156Argumentxxxxxxx_xxxxpredictiveMedium
157ArgumentxxxxxpredictiveLow
158Argumentxxx_x_xxxpredictiveMedium
159ArgumentxxxxxxxxxxpredictiveMedium
160ArgumentxxxpredictiveLow
161ArgumentxxxxxxpredictiveLow
162ArgumentxxxxxxxxxxxxxxxpredictiveHigh
163ArgumentxxxxxpredictiveLow
164ArgumentxxxxxxxpredictiveLow
165ArgumentxxxxxxxxxxxxxxpredictiveHigh
166ArgumentxxxxxxxpredictiveLow
167ArgumentxxxpredictiveLow
168ArgumentxxxxxpredictiveLow
169Argumentxxxxx_xxxxxxxx_xxxxx_xx/xxxxx_xxxxxxxx_xxpredictiveHigh
170ArgumentxxxxxxxpredictiveLow
171Argumentxxxx/xxxxxxpredictiveMedium
172ArgumentxxpredictiveLow
173Argumentxxxxxxx_xxxxpredictiveMedium
174Argumentxxxx_xxx_xxxxxxxx_xxxpredictiveHigh
175Argumentxxxxxxx_xxxpredictiveMedium
176Argumentxxx/xxxpredictiveLow
177ArgumentxxxxpredictiveLow
178ArgumentxxxxxxpredictiveLow
179ArgumentxxxxpredictiveLow
180Argumentxxx_xxxxpredictiveMedium
181ArgumentxxpredictiveLow
182ArgumentxxxxpredictiveLow
183ArgumentxxxxxpredictiveLow
184ArgumentxxxxxxxxpredictiveMedium
185ArgumentxxxxxxxxpredictiveMedium
186Argumentxxxxxxx_xxxpredictiveMedium
187ArgumentxxxxxxxpredictiveLow
188ArgumentxxxxxxxxpredictiveMedium
189Argumentxxxxxx_xxxxpredictiveMedium
190ArgumentxxxxxxxxxxpredictiveMedium
191Argumentxxxxxx_xxxxpredictiveMedium
192Argumentxxx_xxxpredictiveLow
193ArgumentxxxpredictiveLow
194Argumentxxxxxxxx[xxxx]predictiveHigh
195ArgumentxxxxxxxxxxpredictiveMedium
196ArgumentxxxpredictiveLow
197ArgumentxxxxxpredictiveLow
198ArgumentxxxxpredictiveLow
199Argumentxxxx_xxpredictiveLow
200ArgumentxxxxxpredictiveLow
201ArgumentxxxpredictiveLow
202ArgumentxxxpredictiveLow
203Argumentxxxx.xxxxxpredictiveMedium
204ArgumentxxxxxxpredictiveLow
205Argumentxxxxxxxx/xxxxxxxxpredictiveHigh
206Argumentxxxxx/xxxxpredictiveMedium
207ArgumentxxxxxpredictiveLow
208ArgumentxxxxpredictiveLow
209Argumentxxxxxxx/xxx/xxxpredictiveHigh
210Argumentx-xxxxxxxxx-xxxxxxpredictiveHigh
211Input Value::$xxxxx_xxxxxxxxxxpredictiveHigh
212Input ValuexxxxpredictiveLow
213Input Valuexxx.xxx[xxxxx]predictiveHigh
214Network Portxxx/xxxpredictiveLow
215Network Portxxx xxxxxx xxxxpredictiveHigh

References (9)

The following list contains external sources which discuss the actor and the associated activities:

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!