IRGC Analysisinfo

IOB - Indicator of Behavior (115)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en116

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

YITH WooCommerce Compare2
WebCalendar2
Microsoft Windows2
jforum2
GeniXCMS2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemEPSSCTICVE
1DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.021950.66CVE-2010-0966
2Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25kCalculatingHighWorkaround0.021470.00CVE-2007-1192
3jforum username User input validation5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.002890.28CVE-2019-7550
4TikiWiki tiki-register.php input validation7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.010751.38CVE-2006-6168
5nginx request smuggling6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.002410.50CVE-2020-12440
6Microsoft Windows IIS Server Remote Code Execution9.88.9$25k-$100k$5k-$25kUnprovenOfficial Fix0.001590.04CVE-2023-36434
7ajenti API privileges management7.16.8$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.030950.05CVE-2019-25066
8YITH WooCommerce Compare code injection5.35.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000000.05
9Check Point Mobile Access/SSL VPN Portal Agent os command injection5.55.3$0-$5k$0-$5kNot DefinedOfficial Fix0.001180.08CVE-2021-30358
10SonicWALL Secure Remote Access cross site scripting6.66.6$0-$5k$0-$5kHighNot Defined0.023910.00CVE-2021-20028
11SonicWall SSLVPN SMA100 sql injection7.37.3$0-$5k$0-$5kHighNot Defined0.026280.04CVE-2021-20016
12Microsoft Exchange Server Privilege Escalation9.08.2$25k-$100k$0-$5kUnprovenOfficial Fix0.003200.04CVE-2022-21969
13VMware vCenter Server Analytics Service unrestricted upload8.68.5$5k-$25k$0-$5kHighOfficial Fix0.973710.04CVE-2021-22005
14MC Coming Soon Script users.php privileges management6.35.7$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.00
15Gophish cross site scripting3.63.6$0-$5k$0-$5kNot DefinedOfficial Fix0.000540.00CVE-2019-16146
16GeniXCMS index.php cross site scripting5.25.2$0-$5k$0-$5kNot DefinedNot Defined0.000880.00CVE-2017-14765
17WebCalendar search.php cross site scripting3.53.5$0-$5k$0-$5kNot DefinedNot Defined0.000000.00
18Microsoft Windows Work Folder Service privileges management7.37.2$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000430.00CVE-2020-1094
19IBM Security Guardium Database Activity Monitor sql injection8.68.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.001360.00CVE-2016-0249

IOC - Indicator of Compromise (10)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (7)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (10)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/admin/users.phppredictiveHigh
2Filedata/gbconfiguration.datpredictiveHigh
3Filexxxxxxx/xxxxx.xxxpredictiveHigh
4Filexxx/xxxxxx.xxxpredictiveHigh
5Filexxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxxpredictiveHigh
6Filexxxxxx.xxxpredictiveMedium
7Filexxxx-xxxxxxxx.xxxpredictiveHigh
8ArgumentxxxpredictiveLow
9ArgumentxxxxxxxxpredictiveMedium
10Argumentxxxx xxpredictiveLow

References (2)

The following list contains external sources which discuss the actor and the associated activities:

This view requires CTI permissions

Just purchase a CTI license today!