LoggerMiner Analysis

IOB - Indicator of Behavior (45)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en22
zh16
ja6
ru2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Google Chrome4
Weblogicnet2
Huawei Campus Switch2
Samsung TizenRT2
Spring Integration2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemEPSSCTICVE
1Apache Archiva File Upload Service cross site scripting5.15.1$5k-$25k$0-$5kNot DefinedNot Defined0.001080.05CVE-2023-28158
2Splunk Enterprise Forwarder Bundle access control8.58.3$0-$5k$0-$5kNot DefinedOfficial Fix0.003060.00CVE-2022-32158
3KubeVirt input validation6.86.8$0-$5k$0-$5kNot DefinedNot Defined0.000620.05CVE-2022-1798
4virglrenderer IOCTL out-of-bounds write7.07.0$0-$5k$0-$5kNot DefinedNot Defined0.000450.00CVE-2022-0135
5Dreamer CMS cross site scripting4.44.4$0-$5k$0-$5kNot DefinedNot Defined0.000470.00CVE-2023-29774
6Weblogicnet es_desp.php code injection7.36.7$0-$5k$0-$5kProof-of-ConceptUnavailable0.085370.00CVE-2007-4715
7PrestaShop sql injection8.08.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.838960.07CVE-2021-3110
8Oracle MySQL Server Compiling denial of service7.27.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.000450.04CVE-2021-22570
9Microsoft Outlook authentication replay9.08.6$5k-$25k$0-$5kHighOfficial Fix0.922480.00CVE-2023-23397
10Apache Dubbo Generic Invoke deserialization5.05.0$5k-$25k$5k-$25kNot DefinedNot Defined0.014790.03CVE-2023-23638
11Grafana Authentication Cookies information disclosure5.65.5$0-$5k$0-$5kNot DefinedOfficial Fix0.000990.00CVE-2022-39201
12Hugo Pandoc Document exec os command injection5.05.0$0-$5k$0-$5kNot DefinedOfficial Fix0.002280.04CVE-2020-26284
13GNU C Library Call Graph Monitor gmon.c __monstartup buffer overflow [Disputed]6.36.2$0-$5k$0-$5kNot DefinedOfficial Fix0.001210.07CVE-2023-0687
14nginx request smuggling6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.002412.47CVE-2020-12440
15Tecrail Responsive FileManager ajax_calls.php get_file path traversal6.45.8$0-$5k$0-$5kProof-of-ConceptNot Defined0.044580.00CVE-2018-20792
16Google Chrome resource management7.37.0$25k-$100k$0-$5kNot DefinedOfficial Fix0.009890.00CVE-2011-2796
17Samsung TizenRT l2_packet_pcap.c l2_packet_receive_timeout denial of service5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.002700.00CVE-2022-40279
18Microsoft Internet Explorer FTP Server memory corruption6.36.3$25k-$100k$0-$5kHighUnavailable0.969100.03CVE-2009-3023
19Microsoft Windows Shell Shortcut Parser input validation10.09.5$25k-$100k$0-$5kHighOfficial Fix0.970860.03CVE-2010-2568
20TOTOLINK EX1200T command injection6.36.1$0-$5k$0-$5kNot DefinedNot Defined0.023000.00CVE-2021-42872

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (13)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (20)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/see_more_details.phppredictiveHigh
2Fileajax_calls.phppredictiveHigh
3Fileapply.cgipredictiveMedium
4Filexxxxx-xxx.xpredictiveMedium
5Filexx_xxxx.xxxpredictiveMedium
6Filexxxx.xpredictiveLow
7Filexxx/xxxxxx.xxxpredictiveHigh
8Filexx/xxxxpredictiveLow
9Filexxxxxx.xxxpredictiveMedium
10Filexxxx-xxxxxx.xpredictiveHigh
11Filexxxx/xxxx/xxxxxxxxxxxxxxxxxx.xxxxpredictiveHigh
12Filexxx_xxxxxxxxxx/xxx/xx_xxxxxx/xx_xxxxxx_xxxx.xpredictiveHigh
13Libraryxxx.xxxpredictiveLow
14ArgumentxxxxxxxxpredictiveMedium
15Argumentxxxxx_xxxpredictiveMedium
16Argumentxxxx/xxpredictiveLow
17ArgumentxxpredictiveLow
18Argumentxx_xxxxxxxxpredictiveMedium
19ArgumentxxxxpredictiveLow
20ArgumentxxxxpredictiveLow

References (3)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!