Kraken Analysis

IOB - Indicator of Behavior (36)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en20
zh10
fr4
ru2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Apple Mac OS X Server2
Google Chrome2
GNU gzip2
Oracle Solaris2
OpenResty2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25kCalculatingHighWorkaround0.040.04187CVE-2007-1192
2Virtual Programming VP-ASP shopcurrency.asp sql injection7.36.9$0-$5kCalculatingProof-of-ConceptNot Defined0.020.01139CVE-2006-2263
3OpenSSH Fingerprint Record Check sshconnect.c verify_host_key input validation5.34.7$25k-$100k$5k-$25kUnprovenUnavailable0.000.02686CVE-2014-2653
4annyshow DuxCMS cross-site request forgery5.55.4$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00885CVE-2020-36610
5nginx proxy_pass access control8.27.1$0-$5k$0-$5kUnprovenOfficial Fix0.070.02172CVE-2013-2070
6GNU gzip zgrep xzgrep.in incorrect behavior order: early validation7.57.4$0-$5k$0-$5kNot DefinedOfficial Fix0.030.25977CVE-2022-1271
7D-Link DIR-882 webGetVarString buffer overflow7.67.5$5k-$25k$5k-$25kNot DefinedNot Defined0.060.00885CVE-2022-44807
8Google Chrome v8 type confusion6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.020.01136CVE-2022-1134
9Oracle MySQL Cluster unknown vulnerability2.92.8$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.00885CVE-2022-21486
10Apple Mac OS X Server Wiki Server cross site scripting4.34.3$5k-$25k$0-$5kNot DefinedNot Defined0.350.01319CVE-2009-2814
11Linux Kernel core.c perf_swevent_init numeric error5.14.6$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.000.03821CVE-2013-2094
12Oracle Solaris Pluggable authentication module parse_user_name stack-based overflow10.09.0$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.000.92145CVE-2020-14871
13OpenResty API ngx_http_lua_subrequest.c request smuggling7.47.1$0-$5k$0-$5kNot DefinedOfficial Fix0.070.01018CVE-2020-11724
14MX Player App MX Transfer path traversal7.16.8$0-$5k$0-$5kNot DefinedOfficial Fix0.020.01103CVE-2020-5764
15Apache HTTP Server HTTP Digest Authentication Challenge improper authentication8.58.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.07767CVE-2018-1312
16Microsoft IIS privileges management4.33.9$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.020.13525CVE-2005-2678
17Integard Pro LoginAdmin buffer overflow8.58.1$0-$5k$0-$5kProof-of-ConceptNot Defined0.010.05082CVE-2019-16702
18Banu Tinyproxy HTTP Proxy Server acl.c config3.73.6$0-$5k$0-$5kNot DefinedOfficial Fix0.000.01776CVE-2011-1499
19Apache HTTP Server mod_cache null pointer dereference5.34.6$5k-$25k$0-$5kUnprovenOfficial Fix0.030.05242CVE-2013-4352
20Application Dynamics Cartweaver details.php sql injection7.37.1$0-$5kCalculatingHighUnavailable0.020.00986CVE-2008-2918

IOC - Indicator of Compromise (7)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (6)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnerabilitiesAccess VectorTypeConfidence
1T1006CWE-22Pathname TraversalpredictiveHigh
2T1059.007CWE-79Cross Site ScriptingpredictiveHigh
3TXXXXCWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHigh
4TXXXXCWE-XXXxx XxxxxxxxxpredictiveHigh
5TXXXXCWE-XXXXxxxxxxxxxxxxpredictiveHigh
6TXXXX.XXXCWE-XXXxxxxxxxxxxxxpredictiveHigh

IOA - Indicator of Attack (15)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/LoginAdminpredictiveMedium
2Fileacl.cpredictiveLow
3Filedata/gbconfiguration.datpredictiveHigh
4Filexxxxxxx.xxxpredictiveMedium
5Filexxxxxx/xxxxxx/xxxx.xpredictiveHigh
6Filexxx_xxxx_xxx_xxxxxxxxxx.xpredictiveHigh
7Filexxxxxxxxxxxx.xxxpredictiveHigh
8Filexxxxxxxxxx.xpredictiveMedium
9Filexxxxxx.xxpredictiveMedium
10ArgumentxxxpredictiveLow
11ArgumentxxxxpredictiveLow
12ArgumentxxxxpredictiveLow
13Argumentxxxx_xxxxx_xxxxpredictiveHigh
14ArgumentxxxxxxpredictiveLow
15Argumentxxxxxx_xxxxpredictiveMedium

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Might our Artificial Intelligence support you?

Check our Alexa App!