LoggerMiner Analysisinfo

IOB - Indicator of Behavior (45)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Language

en28
zh14
ja4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Microsoft Internet Explorer2
KubeVirt2
Hugo2
Spring Integration2
Tecrail Responsive FileManager2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

These are the vulnerabilities that we have identified as researched, approached, or attacked.

#VulnerabilityBaseTemp0dayTodayExpCouKEVEPSSCTICVE
1Apache Archiva File Upload Service cross site scripting5.15.1$5k-$25k$0-$5kNot definedNot defined 0.001250.00CVE-2023-28158
2Splunk Enterprise Forwarder Bundle access control8.58.3$0-$5k$0-$5kNot definedOfficial fix 0.006820.08CVE-2022-32158
3KubeVirt input validation6.86.8$0-$5k$0-$5kNot definedNot defined 0.000350.00CVE-2022-1798
4virglrenderer IOCTL out-of-bounds write7.07.0$0-$5k$0-$5kNot definedNot defined 0.000450.05CVE-2022-0135
5Dreamer CMS cross site scripting4.44.4$0-$5k$0-$5kNot definedNot defined 0.000840.08CVE-2023-29774
6Weblogicnet es_desp.php code injection7.36.9$0-$5k$0-$5kProof-of-ConceptUnavailable 0.056270.00CVE-2007-4715
7PrestaShop sql injection8.08.0$0-$5kCalculatingProof-of-ConceptNot definedpossible0.686460.02CVE-2021-3110
8Oracle MySQL Server Compiling denial of service7.27.1$5k-$25k$0-$5kNot definedOfficial fix 0.001420.00CVE-2021-22570
9Microsoft Outlook authentication replay9.28.9$5k-$25k$0-$5kAttackedOfficial fixverified0.935470.06CVE-2023-23397
10Apache Dubbo Generic Invoke deserialization5.05.0$5k-$25k$5k-$25kNot definedNot definedpossible0.651550.00CVE-2023-23638
11Grafana Authentication Cookies information disclosure5.65.5$0-$5k$0-$5kNot definedOfficial fix 0.007630.05CVE-2022-39201
12Hugo Pandoc Document exec os command injection5.05.0$0-$5k$0-$5kNot definedOfficial fix 0.004100.04CVE-2020-26284
13GNU C Library Call Graph Monitor gmon.c __monstartup buffer overflow [Disputed]6.36.2$0-$5k$0-$5kNot definedOfficial fix 0.000520.11CVE-2023-0687
14nginx request smuggling6.96.9$0-$5k$0-$5kNot definedNot defined 0.000000.17CVE-2020-12440
15Tecrail Responsive FileManager ajax_calls.php get_file path traversal6.45.8$0-$5k$0-$5kProof-of-ConceptNot defined 0.012630.09CVE-2018-20792
16Google Chrome resource management7.37.0$25k-$100k$0-$5kNot definedOfficial fix 0.008300.00CVE-2011-2796
17Samsung TizenRT l2_packet_pcap.c l2_packet_receive_timeout denial of service5.55.5$0-$5k$0-$5kNot definedNot defined 0.002610.00CVE-2022-40279
18Microsoft Internet Explorer FTP Server memory corruption6.36.3$25k-$100k$0-$5kAttackedUnavailableexpected0.768580.00CVE-2009-3023
19Microsoft Windows Shell Shortcut Parser input validation8.58.4$25k-$100k$0-$5kAttackedOfficial fixverified0.934030.02CVE-2010-2568
20TOTOLINK EX1200T command injection6.36.1$0-$5k$0-$5kNot definedNot defined 0.103240.00CVE-2021-42872

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsIdentifiedTypeConfidence
134.92.166.158158.166.92.34.bc.googleusercontent.comLoggerMiner02/03/2022verifiedLow
2XX.XX.XXX.XXxx.xx.xxx.xx.xxxxx.xxxXxxxxxxxxxx02/03/2022verifiedVery Low
3XXX.XXX.XXX.XXXxxxxxxxxxx02/03/2022verifiedLow
4XXX.XXX.XXX.XXxxx-xxx-xxx-xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxxxxxx02/03/2022verifiedLow

TTP - Tactics, Techniques, Procedures (13)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (20)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/see_more_details.phppredictiveHigh
2Fileajax_calls.phppredictiveHigh
3Fileapply.cgipredictiveMedium
4Filexxxxx-xxx.xpredictiveMedium
5Filexx_xxxx.xxxpredictiveMedium
6Filexxxx.xpredictiveLow
7Filexxx/xxxxxx.xxxpredictiveHigh
8Filexx/xxxxpredictiveLow
9Filexxxxxx.xxxpredictiveMedium
10Filexxxx-xxxxxx.xpredictiveHigh
11Filexxxx/xxxx/xxxxxxxxxxxxxxxxxx.xxxxpredictiveHigh
12Filexxx_xxxxxxxxxx/xxx/xx_xxxxxx/xx_xxxxxx_xxxx.xpredictiveHigh
13Libraryxxx.xxxpredictiveLow
14ArgumentxxxxxxxxpredictiveMedium
15Argumentxxxxx_xxxpredictiveMedium
16Argumentxxxx/xxpredictiveLow
17ArgumentxxpredictiveLow
18Argumentxx_xxxxxxxxpredictiveMedium
19ArgumentxxxxpredictiveLow
20ArgumentxxxxpredictiveLow

References (3)

The following list contains external sources which discuss the actor and the associated activities:

This view requires CTI permissions

Just purchase a CTI license today!