Kraken Analysis

IOB - Indicator of Behavior (40)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en18
zh14
de4
fr2
ru2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

nginx2
D-Link DIR-8822
Oracle Solaris2
Oracle MySQL Cluster2
Microsoft IIS2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25k$0-$5kHighWorkaround0.020.02016CVE-2007-1192
2Virtual Programming VP-ASP shopcurrency.asp sql injection7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.040.00670CVE-2006-2263
3Pimcore admin-ui-classic-bundle ZIP File sql injection7.57.4$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00059CVE-2024-23646
4Interway WebJET CMS cross site scripting6.56.5$0-$5k$0-$5kNot DefinedNot Defined0.000.00087CVE-2022-37830
5ecstatic npm Regular Expression ecstatic.js input validation6.46.3$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00627CVE-2016-10703
6Synology DSM/DS3622xs+/FS3410/HD6500 Session out-of-bounds6.06.0$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00121CVE-2022-3576
7OpenSSH Fingerprint Record Check sshconnect.c verify_host_key input validation5.34.7$25k-$100k$5k-$25kUnprovenUnavailable0.030.00599CVE-2014-2653
8annyshow DuxCMS cross-site request forgery5.55.4$0-$5k$0-$5kProof-of-ConceptNot Defined0.050.00080CVE-2020-36610
9nginx proxy_pass access control8.27.1$0-$5k$0-$5kUnprovenOfficial Fix0.020.01428CVE-2013-2070
10GNU gzip zgrep xzgrep.in incorrect behavior order: early validation7.57.4$0-$5k$0-$5kNot DefinedOfficial Fix0.050.00601CVE-2022-1271
11D-Link DIR-882 webGetVarString buffer overflow7.67.5$5k-$25k$5k-$25kNot DefinedNot Defined0.030.00197CVE-2022-44807
12Google Chrome v8 type confusion6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00351CVE-2022-1134
13Oracle MySQL Cluster unknown vulnerability2.92.8$5k-$25k$0-$5kNot DefinedOfficial Fix0.000.00110CVE-2022-21486
14Apple Mac OS X Server Wiki Server cross site scripting4.34.3$5k-$25k$0-$5kNot DefinedNot Defined0.020.00263CVE-2009-2814
15Linux Kernel core.c perf_swevent_init numeric error5.14.6$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.000.00179CVE-2013-2094
16Oracle Solaris Pluggable authentication module parse_user_name stack-based overflow10.09.0$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.030.28599CVE-2020-14871
17OpenResty API ngx_http_lua_subrequest.c request smuggling7.47.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00580CVE-2020-11724
18MX Player App MX Transfer path traversal7.16.8$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00162CVE-2020-5764
19Apache HTTP Server HTTP Digest Authentication Challenge improper authentication8.58.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.01815CVE-2018-1312
20Microsoft IIS privileges management4.33.9$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.020.16116CVE-2005-2678

IOC - Indicator of Compromise (7)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (6)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnerabilitiesAccess VectorTypeConfidence
1T1006CWE-22Path TraversalpredictiveHigh
2T1059.007CWE-79Cross Site ScriptingpredictiveHigh
3TXXXXCWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHigh
4TXXXXCWE-XXXxx XxxxxxxxxpredictiveHigh
5TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHigh
6TXXXX.XXXCWE-XXXxxxxxxxxxxxxpredictiveHigh

IOA - Indicator of Attack (17)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/LoginAdminpredictiveMedium
2Fileacl.cpredictiveLow
3Filedata/gbconfiguration.datpredictiveHigh
4Filexxxxxxx.xxxpredictiveMedium
5Filexxxxxx/xxxxxx/xxxx.xpredictiveHigh
6Filexxx_xxxx_xxx_xxxxxxxxxx.xpredictiveHigh
7Filexxxxxxxxxxxx.xxxpredictiveHigh
8Filexxxxxxxxxx.xpredictiveMedium
9Filexxxxxx.xxpredictiveMedium
10Libraryxxx/xxxxxxxx.xxpredictiveHigh
11ArgumentxxxpredictiveLow
12ArgumentxxxxpredictiveLow
13ArgumentxxxxpredictiveLow
14Argumentxxxx_xxxxx_xxxxpredictiveHigh
15ArgumentxxxxxxpredictiveLow
16ArgumentxxxxxxxxxxxpredictiveMedium
17Argumentxxxxxx_xxxxpredictiveMedium

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you want to use VulDB in your project?

Use the official API to access entries easily!